|
httrack allow you to download websites (including
images and scripts)
Even if you block the "right-click" with _javascript_
(preventing the "save image" options) you can make a "print-screen" and
copy/paste the image.
Frederic MCP, IT Project+, i-Net+, CIWA, A+ member of:
CompTIA-ITPRO, HDI,
IETF ------------------------------------------------------ http://fredsfastcram.netfirms.com------------------------------------------------------
----- Original Message -----
Sent: Friday, December 26, 2003 4:43
PM
Subject: Re: [Fwd: [isdf] need help from
the ietf list...can someone postthis for me? or allow me to post
directly?]
All web sites "download". They have to. What you are referring
to is
caching. Turning on or off caching would have no effect on
security.
Bad guys can always make websites that use the true gifs,
etc from the
real websites. They can get those images,etc from the
real site or from
your local cache. Or they can copy them to a fake
site. In fact, it is
better for their performance to have you
download them from the real site.
--Dean
On Mon, 22 Dec 2003,
Tom Petch wrote:
> Banks do make it extraordinarily easy for their
sites to be spoofed by
> allowing all their html, .gif etc to appear in
my Temporary Internet Folder
> without even me having to lift a
finger.
>
> You can make web sites which don't download - time
for banks to learn about
> this.
>
> Tom Petch,
Consultant
|