Yet another Internet Explorer exploit has been discovered. This one is ripe for many of the phishing scams that have been going around.

Secunia have a good, detailed advisory.

The vulnerability is caused due to an input validation error, which can be exploited by including the “%01” URL encoded representation after the username and right before the “@” character in an URL.
Successful exploitation allows a malicious person to display an arbitrary FQDN (Fully Qualified Domain Name) in the address bar, which is different from the actual location of the page.

Steve Minutillo has an example. Andy at absoblogginlutely has another example.

Remember, these only ‘work’ as intended in Internet Explorer.

It looks like Seyed has finally thrown in the towel. BlogShares has officially closed down.

I am sorry to announce that BlogShares will not be reopening after the current technical difficulties are resolved. Currently, the database server is dead and looks to be for the next few days.

It was fun while it lasted. But as Seyed himself says there has been a decline of quality service, new features and ultimately income for the site in the last couple of months.

I’m glad to have been part of it from quite early on (I was member number 341, joined at the end of March).