Re: Browser Helper Objects

[Jeffrey Lee <jeff@xxxxxxxxxxx>]

Good thing I use Mozilla :) 

Is there a way to disable the browser helpers?

On Wed, 2004-07-07 at 14:25, HankHeath@xxxxxxx wrote:
> I don't know if you have heard about this, but I thought it might be worth 
> passing along. Internet Explorer has another hole in it that is being 
> exploited 
> for criminal means. The hole is called a "browser helper object." A browser 
> helper object is a bit of code that can be attached to Internet Explorer to 
> help 
> you do things like download programs or start up Adobe or so on. Neat things 
> when used correctly.
> 
> Some criminal minds have taken it a step farther. They have a browser helper 
> object that helps you fill out secured forms on the Internet - things like 
> on-line banking. The criminal piece captures your keystrokes as you work on a 
> secured connection. Since the keystrokes have not been sent out from your 
> machine, they have not yet been encrypted (which is what the secured 
> connection does 
> for you). Then, later on, the browser helper object sends your secured 
> information to someone who can strip your account. 
> 
> There is no fix out for this. There is a tool to inspect the browser helper 
> objects on your system ( http://www.definitivesolutions.com/bhodemon.htm ), 
> but 
> it does not repair them. 
> 
> So far, the only solution I have come up with is to use Mozilla as a browser 
> when doing on-line banking. Or not do any on-line banking at all.
> 
> Be careful out there.
> 
> - HH
> 
> More information can be found at
> 
> http://www.pcmag.com/article2/0,1759,1620505,00.asp
> 
> http://reviews-zdnet.com.com/AnchorDesk/4520-7297_16-5142452.html
> 
> http://www.zdnet.com.au/news/security/0,2000061744,39152544,00.htm
> --
> This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
> To post a message email: MIDRANGE-L@xxxxxxxxxxxx
> To subscribe, unsubscribe, or change list options,
> visit: http://lists.midrange.com/mailman/listinfo/midrange-l
> or email: MIDRANGE-L-request@xxxxxxxxxxxx
> Before posting, please take a moment to review the archives
> at http://archive.midrange.com/midrange-l.
>