3 ms·
Explanation for the spoofed domain name: https://twitter.com/sephr/status/1055751684146655232 https://twitter.com/sephr/status/1055751684146655232 Bing can eas
by Sephr 8y ago
Explanation for the spoofed domain name: https://twitter.com/sephr/status/1055751684146655232 https://twitter.com/sephr/status/1055751684146655232
Bing can easily fix this domain spoofing vulnerability. I've reported this vulnerability to MSRC previously but received no response.
This is also why open redirects can be so dangerous. Even if this domain spoofing vulnerability is fixed on Bing's end attackers can abuse open redirects to achieve the same result.
- nielsole 8y agoI don't think they will fix the underlying issue now. I've had the same issue ( literally trying to download chrome) in 2014. Now that they have public pushback they will fix just this ad placement. I wonder what makes them think this is acceptable.