Text 4971, 50 rader
Skriven 2005-03-16 10:05:30 av mark lewis (1:3634/12)
   Kommentar till text 4964 av Jeff Guerdat (1:106/2000.0)
Ärende: Cookies
===============
JL>> Afterwards, I clicked the Sites button in the Privacy
JL>> area. There was a list of all these sites with 'Always
JL>> Block' beside them. I never entered the sites of even
JL>> used this feature. Is this a default thing? I believe
JL>> some of the sites, I have not even visited or heard of.

CS>>They're probably being blocked from your "HOSTS" file.  You need to open

 JG> The hosts file is nothing more than a file that allows IP
 JG> address to name conversion.  DNS replaced this after the
 JG> files got too huge to ship around to each computer way
 JG> back when.  There's nothing in a hosts file that can block
 JG> anything.

actually, there is but not in the way that folk might think... my hosts files
contain several thousand entries... all of them are known "bad" sites for one
reason or another... all of them are directed to 120.0.0.1 and since i don't
run a webserver on 127.0.0.1, attempted connections to those "bad" sites will
fail...

 JG> The current caution with the hosts file si the phishing
 JG> attempts which modify the hosts file so when you go to,

i'm not aware of phishing spams that try to modify the hosts file... what i am
aware of is those who try to hide where they are going and make it appear that
they are going directly to where ever they are phishing for...

the only way i can see for a phishing spam to do this is via some security hole
in the system that would allow a script to run in the local zone or and two
pronged attack where the first prong is the invasion of the system by a worm or
trojan that sets up the modifications to the hosts file before the phishing
spam arrives...

in either case, one should be patched up with all the secutiry updates as well
as be knowledgable enough to know that these places, like paypal, ebay, banks,
and other financial institutions, do not send you email asking you for
confirmation of your data... if they need to confirm something, they'll do that
by phone call or on your next visit to the site...

 JG> say, www.paypal.com, the system looks in the local file
 JG> first, finds an entry and goes to the bogus address
 JG> instead of the real one.  In general, the only thing in
 JG> your hosts file should be the loopback address, "127.0.0.1
 JG> localhost"...

FWIW: all my hosts files are marked READ-ONLY, too...

)\/(ark

 * Origin: (1:3634/12)