Automatic File Corruption
Warning to Internet Explorer 4.0 Users:
When
the countdown clock below reaches zero a
file will be created on your hard drive called C:\badfile.bat.
If a file called
C:\badfile.bat already exists on your machine then it will
be overwritten with garbage.
This is a serious security breach because:
- There doesn't need to be a countdown - we just stuck in
a countdown to give you a chance to turn back. This attack
could be made completely silent, completely automatic, and
completely instantaneous.
- This method could have been used to corrupt any file on your
hard drive. In attempting to downplay past bugs, Microsoft has
pointed out that a malevolent hacker would need to know the name
of a file on your system in able to use/destroy it. However,
there are certain files (such as C:\autoexec.bat) which
almost all Windows users have and which would have devastating
effects if erased or corrupted.
Back