Malicious Web Pages Can Install Dashboard Widgets

**************************************************************
Welcome to Nethappenings the Internet's 
largest and oldest K12 Education Mailing List 
exploring and using the World Wide Web. 
Founded by Gleason Sackmann and now Moderated by
Karen Ellis of the Educational CyberPlayGround.

NetHappenings Mailing List ©1993
-- Subscribe - Unsubscribe - Set Preferences
http://www.edu-cyberpg.com/Community/NetHappenings.html

Advertise on Nethappenings
http://www.edu-cyberpg.com/Community/Subguidelines.html

Educational CyberPlayGround Community Mailing Lists
http://www.edu-cyberpg.com/Community/
**************************************************************



******************************************************************
ARE YOU CRANKY? SCANKY? ARE YOU INFECTED??

Everyone Needs Security Information
http://www.edu-cyberpg.com/Technology/SECURITY.html

FREE and it checks your computer to see if you're
vulnerable and/or have been infected by a virus or Trojan Horse.
******************************************************************


Malicious Web Pages Can Install Dashboard Widgets
http://it.slashdot.org/it/05/05/08/2131208.shtml?tid=172&tid=179&tid=3

Posted by timothy on Sunday May 08, @05:49PM
from the not-good dept.

bonch writes "If you're running Safari on OS X Tiger and go to this
website, a 'slightly evil' Dashboard widget will be automatically
downloaded and installed and can't be removed without manually
removing the file from the Library folder and rebooting the computer.
The widget is called Zaptastic and is a demonstration by the author
of how easy it is to exploit Dashboard for nefarious purposes. The
essay, released under the Creative Commons License, goes on to
describe the many ways users can be taken advantage of--imagine porn
sites auto-installing adware widgets without your knowledge." So if
you're on a Mac, it would be smart to view that page with something
other than Safari.

...

     zaptastic: blueprint for a widget of mass destruction
     http://stephan.com/widgets/zaptastic/




<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>
EDUCATIONAL CYBERPLAYGROUND 
http://www.edu-cyberpg.com

Copyright statements to be included when reproducing
annotations from Nethappenings.

The single phrase below is the copyright notice to be used when
reproducing any portion of this report, in any format.

> From NetHappenings copyright
> Educational CyberPlayGround.
http://www.edu-cyberpg.com/Community/NetHappenings.html

Net Happenings, K12 Newsletters, Network Newsletters
http://www.edu-cyberpg.com/Community/

FREE EDUCATION VENDOR DIRECTORY LISTING
http://www.edu-cyberpg.com/Directory/

HOT LIST REGISTRY OF K12 SCHOOLS ONLINE
http://www.edu-cyberpg.com/Schools/
<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>~~~~~<>

Other related posts: