No alert of DownLoads, sort of.

I DL a 17MB program. Watching my connections through the firewall it completely DLed with no alert from HIPS or FW.

Using FF3
The process:

Choose a file to DL
Do not click "Save"
The file will completely DL with no alerts
Clicking "Save" now, HIPs and FW alert on activity

Does this mean that DL items can get in with no alerts?

Can this process be used to add malware while surfing?

Is it exploitable?

 

The file will be cached ... that's all. Because you've already sent the http get. Try this. Click save as, wait 30 seconds and then click ok. You'll see that the file downloads much faster, because it was cached the first 30 seconds.

Why should there be any alert to you downloading a file through your browser, after establishing a connection to a website and deliberately clicking on a file?

Mrk