刚刚才发布的新闻... From ZDnet :http://blogs.zdnet.com/security/?p=1972&tag=nl.e589 重点句在这边: In a nutshell, it’s when you visit a malicious website and the attacker is able to take control of the links that your browser visits. The problem affects all of the different browsers except something like lynx. The issue has nothing to do with JavaScript so turning JavaScript off in your browser will not help you. It’s a fundamental flaw with the way your browser works and cannot be fixed with a simple patch. With this exploit, once you’re on the malicious web page, the bad guy can make you click on any link, any button, or anything on the page without you even seeing it happening 简单就是说...这种恶意网站就算你关掉javascript的支援也没辄 因为他是利用浏览器本身的缺点来攻击的 你到这恶意网站後会完全被控制, 包括点选任何连结或按钮或任何东西 现在只有确定Lynx 不会遭受这种攻击 所以...改用Lynx来看最安全XD 微软跟Mozzila都承认这是个暂时无法解决的难题 目前解决办法就是:关掉浏览器所有scripting 和 pluggins -- 我想 大家先到有保障的网站逛就没事了XD --

※ 发信站: 批踢踢实业坊(ptt.cc) ◆ From: 67.194.2.233