Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Locking Down the Pop-up Perps
Mark Rasch, 2002-11-18

Pop-up ads have already inspired civil lawsuits. Here's how federal computer crime law and the USA-PATRIOT Act could put obnoxious advertisers in the pokey.

Comments Mode:
Locking Down the Pop-up Perps 2002-11-18
lipa (1 replies)
Locking Down the Pop-up Perps 2002-11-19
Didier (1 replies)
Locking Down the Pop-up Perps 2002-11-20
lipa
> It's not the content of your message that cause the problem, but e.a,
> that because I agree to read your message I will not agree that
> reading it open a ads to another web site.
did you agree to have a javascript interpreter turned on? yes? well then you did agree to see any popup window, unless of course you break the interpreter (disable window.open() or whatever the function is called)
> The problem is realy coming from the active scripting. More and more
> sites use it, so you can not simply forbidden it.
YES! i finally got you to say it - the problem is in the scripting functionality
in your browser.
right now the situation is very simple - either have scripting disabled, and parse the javascript yourself (which is what i'm doing since i'm using the lynx browser), or turn it on, and face the consequences. the problem is that most browsers default to having this feature turned on.
in the future someone might use the techniques we use for spam email today - either have something mandated by law in the url or in the HTTP header in all pages with "spam" functionality,
have some opt-in mechanism, and maintain public blacklists of pages used for automatic blocking.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/124/17189#17189
Locking Down the Pop-up Perps 2002-11-22
Anonymous (1 replies)
One way of prosecuting may be... 2002-11-25
Anonymous







 

Privacy Statement
Copyright 2009, SecurityFocus