| |||||||||||||
Xorg flawXorg flawPosted Aug 21, 2010 9:12 UTC (Sat) by niner (subscriber, #26151)In reply to: Xorg flaw by NAR Parent article: An ancient kernel hole is closed
"send e-mails in the user's name, etc."
Just because this is one of my favourite misconceptions floating around: nothing at all prevents anyone from sending e-mails in any user's name. Same as you can write any name as sender on an envelope of bad old snail mail. The only thing proving the identity of the sender is in both cases a signature. The electronic version even more so than your easy to fake hand writing. And of course, such a signature should not lie around on your computer unprotected...
(Log in to post comments)
Xorg flaw Posted Aug 23, 2010 23:42 UTC (Mon) by mgedmin (subscriber, #34497) [Link]
The bad thing that malicious programs can do is send emails using the user's bandwidth (and their IP, to avoid spam blacklists).
|
|||||||||||||