Internet Explorer Bug Leaks Whatever You Type in the Address Bar

[monkeymagick]

Ars Technica reports that latest version of Internet Explorer has a bug that leaks information typed in the address bar. Any currently visited site can view that text it has been entered. I'm pretty sure most are not using IE except maybe for work or help relatives still stuck using a Compaq. Naturally, users are urged to use any other non-IE browser.

See a demonstration.

The proof-of-concept makes it transparent that the attacking website is viewing the entered text. The hack, however can easily be modified to make the information theft completely stealthy...

 

[Uvaman2]

Jeez

 

[blkt]

Not to worry it's not a bug, but an intended feature.

 

[Rahh]

Wait is this Internet Explorer or Edge?

 

[ManofGod]

Thanks for the heads up. Now, I wonder if we would here about it if it were any other browser?

 

[tesfaye]

Not to worry it's not a bug, but an intended feature.

View attachment 37843

This all day. Didn't read the article or try the proof of concept (no time, I gotta tackle some NetScaler issues, fun fun fun). So, the search as you type feature is fk'd it seems.

 

[theplaidfad]

Good thing I use Edge.

 

[Master_shake_]

a bug uh huh.

working as intended no doubt.

 

[Fifth Horseman]

I'm really digging the C64 inspired color scheme and style in the video.

 

[cyclone3d]

Ummm, why would this even be news? You can grab pretty much anything with javascript anyway from whatever browser you are using.

Took 5 seconds to find the code to grab what is in the address bar.
https://stackoverflow.com/questions/28980014/get-full-web-page-url-from-address-bar

 

[B00nie]

Ummm, why would this even be news? You can grab pretty much anything with javascript anyway from whatever browser you are using.

Took 5 seconds to find the code to grab what is in the address bar.
https://stackoverflow.com/questions/28980014/get-full-web-page-url-from-address-bar

Not likely. I block javascript. On a related note I´d never even dream of using IE or Edge.

 

[Guarana [BAWLS]]

IE/Edge? Only when required, or for testing.