Jump to content

Welcome to Rune Tips, the first ever RuneScape help site. We aim to offer skill guides, quest guides, maps, calculators, informative databases, tips, and much more to help you get the most from the Massive Online Adventure Game, RuneScape, by Jagex Ltd © 2009.

Report Ad

Welcome to Forum.Tip.It
Register now to gain access to all of our features. Once registered and logged in, you will be able to create topics, post replies to existing threads, give reputation to your fellow members, get your own private messenger, post status updates, manage your profile and so much more. If you already have an account, login here - otherwise create an account for free today!
Photo

IE Vulnerability - Mouse Tracking


  • Please log in to reply
10 replies to this topic

#1
Randox
[ Display Name History ]

Randox

    The Consultant

  • Administrators
  • 6,605 posts
  • Gender:Not Telling
  • Joined:21 June 2006
  • RuneScape Status:Semi-Retired
  • RSN:Randox
  • Clan:All Friendly
A vulnerability in Internet Explorer versions 6 through 10 allows websites to track your mouse while they are open in the program, even if IE is minmized. While RuneScape bank pins should be safe against this as the numbers move around, anyone who uses an onscreen keyboard to avoid any potential keyloggers would be vulnerable.

From this article on spider.io:

On the 1st of October, 2012, we disclosed to Microsoft the following security vulnerability in Internet Explorer, versions 6–10, which allows your mouse cursor to be tracked anywhere on the screen—even if the Internet Explorer window is minimized. The vulnerability is particularly troubling because it compromises the security of virtual keyboards and virtual keypads.

...

Whilst the Microsoft Security Research Center has acknowledged the vulnerability in Internet Explorer, they have also stated that there are no immediate plans to patch this vulnerability in existing versions of the browser. It is important for users of Internet Explorer to be made aware of this vulnerability and its implications.

The vulnerability is already being exploited by at least two display ad analytics companies across billions of page impressions per month.

...



#2
Kaida23
[ Display Name History ]

Kaida23

    Retired Staff

  • Members
  • 4,533 posts
  • Gender:Male
  • Location:The Great White North, eh?
  • Joined:17 March 2009
  • RuneScape Status:F2P
  • RSN:Kaida23
  • Clan:Total F2P Skillers
Perhaps it should also be pointed out that the official RS client uses IE to run the game. Be careful people.

Posted Image
Check out my blog to read the Adventures of a Big Damn (F2P) Hero.


Posted Image

THE place for all free players to connect, hang out and talk about how awesome it is to be F2P.

So, Kaida is the real version of every fictional science-badass? That explains a lot, actually...


#3
Nyosuht
[ Display Name History ]

Nyosuht

    Website Crew Alumnus

  • IRC Channel Staff
  • 1,827 posts
  • Gender:Not Telling
  • Joined:17 February 2007
  • RuneScape Status:P2P
  • RSN:Omnipotence
  • RSN2:Nyosuht

Perhaps it should also be pointed out that the official RS client uses IE to run the game. Be careful people.

While this was true a few years ago, I do not believe this has been the case since they started shipping the client with its own JRE.

rnHJQwZ.png
In a state of tranquillity, wealth, and luxury, our descendants would forget the arts of war and the noble activity and zeal which made their ancestors invincible. ~Samuel Adams; 1 August, 1776
There are men, in all ages, who mean to exercise power usefully; but who mean to exercise it. They mean to govern well; but they mean to govern. They promise to be kind masters; but they mean to be masters. ~Daniel Webster; 15 March, 1837


#4
Kaida23
[ Display Name History ]

Kaida23

    Retired Staff

  • Members
  • 4,533 posts
  • Gender:Male
  • Location:The Great White North, eh?
  • Joined:17 March 2009
  • RuneScape Status:F2P
  • RSN:Kaida23
  • Clan:Total F2P Skillers
It uses IE to run the ads, so I just assumed that it was also running the game. I might be wrong. Perhaps someone more familiar could clarify.

Posted Image
Check out my blog to read the Adventures of a Big Damn (F2P) Hero.


Posted Image

THE place for all free players to connect, hang out and talk about how awesome it is to be F2P.

So, Kaida is the real version of every fictional science-badass? That explains a lot, actually...


#5
obfuscator
[ Display Name History ]

obfuscator

    Tanned Caveman

  • Members
  • 20,231 posts
  • Gender:Not Telling
  • Joined:6 March 2008
  • RuneScape Status:Retired
The rs client has used webkit for several years.

polvCwJ.gif
"It's not a rest for me, it's a rest for the weights." - Dom Mazzetti


#6
Mojohaza1
[ Display Name History ]

Mojohaza1

    Spider Egg

  • Members
  • 58 posts
Yet another reminder why you shouldn't use Internet Explorer. It takes just a few seconds to download another browser like Chrome or Firefox.

mX0rmhR.gif
Click the image above to be taken to the Wilderness Guardians website.

Advisor in Wilderness Guardians

Honourary Member in Clan Europe

Ex-Leader Of Descendant Guardians and True Supremacy


#7
Nyosuht
[ Display Name History ]

Nyosuht

    Website Crew Alumnus

  • IRC Channel Staff
  • 1,827 posts
  • Gender:Not Telling
  • Joined:17 February 2007
  • RuneScape Status:P2P
  • RSN:Omnipotence
  • RSN2:Nyosuht
In all fairness, neither of those browsers is without issue. More important than using anything buy IE is being aware of the potential risks of any software you use.

That said, I'm more than a little disappointed by the idea that it took over two months to get "Yeah, but we're not going to fix it" from Microsoft.

rnHJQwZ.png
In a state of tranquillity, wealth, and luxury, our descendants would forget the arts of war and the noble activity and zeal which made their ancestors invincible. ~Samuel Adams; 1 August, 1776
There are men, in all ages, who mean to exercise power usefully; but who mean to exercise it. They mean to govern well; but they mean to govern. They promise to be kind masters; but they mean to be masters. ~Daniel Webster; 15 March, 1837


#8
Kaida23
[ Display Name History ]

Kaida23

    Retired Staff

  • Members
  • 4,533 posts
  • Gender:Male
  • Location:The Great White North, eh?
  • Joined:17 March 2009
  • RuneScape Status:F2P
  • RSN:Kaida23
  • Clan:Total F2P Skillers
I guess even Microsoft realizes that almost no one uses IE anymore. :P

Posted Image
Check out my blog to read the Adventures of a Big Damn (F2P) Hero.


Posted Image

THE place for all free players to connect, hang out and talk about how awesome it is to be F2P.

So, Kaida is the real version of every fictional science-badass? That explains a lot, actually...


#9
Riptide Mage
[ Display Name History ]

Riptide Mage

    Skeleton Shield

  • Members
  • 1,027 posts
  • Gender:Male
  • Joined:23 June 2004
  • RuneScape Status:P2P
  • RSN:Riptide Mage
  • Clan:DGS
The on-screen keyboard does jack squat to prevent keyloggers. A physical keyboard and the OSK raise the exact same key down/up/pressed events as one another.

You make it sound like running through a few level 87 monsters is hard which it really shouldn't be at your level.



#10
Nyosuht
[ Display Name History ]

Nyosuht

    Website Crew Alumnus

  • IRC Channel Staff
  • 1,827 posts
  • Gender:Not Telling
  • Joined:17 February 2007
  • RuneScape Status:P2P
  • RSN:Omnipotence
  • RSN2:Nyosuht
Maybe if you only consider software keyloggers. An in-line hardware keylogger has no way of catching anything from an on-screen keyboard.

Of course, you probably have bigger issues if someone can set up a hardware keylogger on your personal machine.

rnHJQwZ.png
In a state of tranquillity, wealth, and luxury, our descendants would forget the arts of war and the noble activity and zeal which made their ancestors invincible. ~Samuel Adams; 1 August, 1776
There are men, in all ages, who mean to exercise power usefully; but who mean to exercise it. They mean to govern well; but they mean to govern. They promise to be kind masters; but they mean to be masters. ~Daniel Webster; 15 March, 1837


#11
Dudecrush8
[ Display Name History ]

Dudecrush8

    Website Crew

  • Website Crew
  • 620 posts
  • Gender:Not Telling
  • Location:Why do you want to know?
  • Joined:26 July 2007
  • RuneScape Status:P2P
Nyosuht is correct. However, a keylogger masquerading as a driver for your keyboard (which is still software) can also be defeated by use of the onscreen keyboard.

"300 programmers make their futile but glorious last stand against 1000000 angry players in The battle of Misthalin. They fight for honor, glory and new content sacrificing themselves so that their game may live on. This is Madness! This Is JAGEEEX!"





0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users