MS IE Password inputs

From: Jon Embury (jon.emburyat_private)
Date: Tue Nov 20 2001 - 13:28:14 PST

  • Next message: Linux Mandrake Security Team: "MDKSA-2001:086 - tetex update" 

    Just something I've noticed on IE 4 & 5.5

If you enter a password that contains a mix of non-alphabetic and alphabetic
characters to an MS IE password input and then use the keyboard to select it
while holding down tab the cursor / selected region jumps between the
non-alphabetic characters in exactly the same manner as it does when you
apply the same technique in word, Interdev, vb etc.

It doesn't reveal the password, but it would seem to reveal at least some of
the structure.

Eg

1 2 3 4 5


Jon Embury
Developer, F1 Solutions
www.f1solutions.com.au

    This archive was generated by hypermail 2b30 : Tue Nov 20 2001 - 17:36:33 PST