samy's worm
Today interestingly, i came across a pure web2.0 javascript worm !!! Iam not joking...
The worm was exposed some technical vulnerabilities( where to use GET and POST methods). The full source code and the technical details of the worm is available at : http://namb.la/popular/tech.html.
The AJAX has some limitations(for the security reasons). The most important is cross domain policy. That is, you can not access the cross domain data. you can access the data only from the currently requesting domain. Here http://ajaxextended.com breaks the cross domain limitations of AJAX and the author says that the code will work on 90% of the browsers. The security problem agan arises, people may miss use this cleaverly coded js programm. Again , the author says , AJAX can nothing to do with the miss use of the code, its the matter of ethics not the technology.
Check out the above sites if you are an AJAXian!!!!
The worm was exposed some technical vulnerabilities( where to use GET and POST methods). The full source code and the technical details of the worm is available at : http://namb.la/popular/tech.html.
The AJAX has some limitations(for the security reasons). The most important is cross domain policy. That is, you can not access the cross domain data. you can access the data only from the currently requesting domain. Here http://ajaxextended.com breaks the cross domain limitations of AJAX and the author says that the code will work on 90% of the browsers. The security problem agan arises, people may miss use this cleaverly coded js programm. Again , the author says , AJAX can nothing to do with the miss use of the code, its the matter of ethics not the technology.
Check out the above sites if you are an AJAXian!!!!
