This flaw
is very critical. Please be careful and take note of the website
URL when submitting data!
The first flaw relates to phishing. Firefox anti-phishing feature
will actually tell you that the website is legitimate when in fact,
it's a fake site.
Don't believe? Try this:
http://chassart.com//.support/www.amazon.com/flex/sign-out.html/2Fhomepage=protocol=httpsaction=sign-out/exec.php?cmd=sign-in
Who can tell me what's wrong with this website? (Other than the
obvious name change)
Those who can, good for you. Those who can't, wait for
answers.
The next flaw is related to blocking popups. This flaw will allow
attackers to read sensitive information on your computer. How it
works, I don't know. Perhaps need to click on some link to open a
new window, which Firefox will block and leads to a compromise of
your data.
