Posts by Alun Jones 1

Windows has had support for .tar / .tgz / .tar.gz files since 2018, as "tar" and "curl" are now included in Windows 10.

Don't read the headline, read the article.

Seriously, did any of you read the actual article?

Or even more unusual, click through the links to the source material?

This was NOT an XSS attack. There is no XSS component described in the source material or the article itself. ONLY in the headline.

So, no, Microsoft didn't just pay $25K for someone to find an XSS attack.

To Tim 11: Your gf got hacked because she used a stupid password, or was keylogged, or uses the same password at Ashley Madison. The hackers are in her account. The only reason they haven't changed her password for her is that they want her to send non-spam emails so their spam can evade filters.

To P. Lee: Your use of a different client is a relatively good idea, but you would then have to avoid using the web client even once in a poisoned environment. We do rely overly much as an industry on "HTTPS will protect us / HTML and JavaScript are the engines of choice", and that's often the cause of our downfall. If the suggested fix to a security problem is to know where it lies and avoid it, the effort involved in doing so is more than actually fixing the underlying bug.