4 ms·
Ask HN: Do you use MOTW (Mark of the Web)?
Please refer to:
http://msdn.microsoft.com/en-us/library/ms537628(VS.85).aspx
http://www.helpstuff.com/motw.html
Do you use this stuff? The creepy thing is that I somehow saw this "injected" in my very trivial static site (using nginx). Is it possible that nginx may have added this? Do you think this MOTW is useful at all?
Answers to any of these questions will be appreciated! Thanks.
PS: Why aren't my links clickable? =S
- fragmede 16y ago> Urls become links, except in the text field of a submission. http://news.ycombinator.com/formatdoc http://news.ycombinator.com/formatdoc
- ScottWhigham 16y agoNever heard of it...
- lfborjas 16y agoThat "injection" was probably done by internet explorer, as stated in the first sentence of that msdn site. I don't have IE, so can't give you a certain answer. Check your site in another browser to see if that motw isn't there. I bet it won't be.
- ez77 16y agoIt's puzzling me beyond belief. I first saw, of all things, using netcat! I don't use IE... but that showed up there. Now I'm a level-1 rookie, and I know my VPS security settings are very lax (e.g., I use root all the time), so I could only understand it with a benign intruder. Beats me...
- lfborjas 16y agoWell, sounds like you got some `chown` to do... Some security considerations can't be overlooked, granted; but don't fret, it was possibly put there client side(One might even hypothesise that a WYSIWYG editor put it there by default, but I deem you would have seen that). Just give the url to someone and ask them if it appears in the source. If it does, delete it and see if appears again. If it does, then do get paranoid with security, I guess.
- prodigal_erik 16y agoApparently documents IE saves locally are not bit-for-bit faithful to the original. Any chance you downloaded your document and uploaded it again later, maybe after editing locally? Also, dear Microsoft: PLEASE STOP SMUGGLING METADATA IN COMMENTS! Markup is extensible for a reason. Jeez.
- ez77 16y agoIMPORTANT UPDATE: I now realize this happened when I saved to disk my webpage using Chrome(!!!!). Frankly I thought Chrome would never do this, along prodigal_erik's lines. It looks like IE is not the only one that isn't bit-for-bit faithful...