Protip: If you'd rather cyber-scoundrels didn't know the contents of your comp, don't apply for a Pakistani passport A Pakistani government website was compromised with a keylogger and other malware that hoovered up a whole host of information about people checking on their passport application status. Researchers from Trustwave discovered that the Scanbox JavaScript framework was running on the site. The keylogger scooped up users' login …
JavaScript appears to have become far too clever for its own good while browsers seem to simply let it get away with whatever it seeks to do. In this day and age it shouldn't be possible to merely inject a script link into a web page and do what they have done.
I thought it better to not use the 'nuke it from space' icon given the current situation in the region.
The Register 
Biting the hand that feeds IT
Copyright. All rights reserved © 1998–2024
