IS Internet Explorer 8.0 going kill Blackhat

crashed

Senior Member
Joined
Aug 13, 2008
Messages
958
Reaction score
1,209
Hi Guys,

I've been doing some reading up on IE 8, and I feel that it could be painful to many of us BH's.

For example "InPrivate Filtering", allows the user to block cookie activity by sites, so I can see CS going out the window, and thats just the tip of the iceburg.

Anyone else have any opinions?
 
Wont make a difference in my opinion. People wont realize what's going on and just click yes until the boxes disappear. Most techy people are using FF so it isn't like the people that see the popups are going to realize what is going on to report you either. That is my vague opinion.
 
I think the new IE is not a danger for BH. All the other browser have many of these abilities alreay but do you think everyone will use it? No, not all people are comfortable with setting up cookie filters, etc. - they don't even know what cookies and other technical stuff are. So it will be still good for BH's :)
 
The good thing is that cookies are used for so much normal tracking etc, that I expect users will just get bored of keep seeing warnings and disable the warning pop-ups.
 
You will just have to stuff more % of people to make up for this and that's all he he
 
True, though im assuming many people will turn on Inprivate Browsing by default won't they? As no one likes being tracked (where ccoookies/history etc get cleared at end of session).

I'd like to see some stats on this, tempted to download and install in my dev network so I can see just what difference it actually makes.
 
People will get tired of entering login info on each site in each session. They will only enable private for porn browsing :)
 
Until I got into cookie stuffing I never knew what cookies really were and by default all my browsers were set to automatically accept third party cookies. If they release the browsers with prompt people will just get pissed off or just turn it back on anyway. No standard user will know the first thing about cookies, the only difference it may make is to FF users who I don't stuff anyway as these are the more techy people.
 
Until I got into cookie stuffing I never knew what cookies really were and by default all my browsers were set to automatically accept third party cookies. If they release the browsers with prompt people will just get pissed off or just turn it back on anyway. No standard user will know the first thing about cookies, the only difference it may make is to FF users who I don't stuff anyway as these are the more techy people.

You've been on the internet for how long and you didn't know what cookies were? :eek:
 
I obviously knew what they were but had no idea what the hell cookie stuffing was and I have always had it on auto-accept, I hate having it on prompt anyway, takes up more time.

I also had no idea that they could be used as an exploit.
 
whats the rest of the iceberg?

like people above have said this has been out, theres a bunch of firefox plugins to block cookies, privacy, ect ect ect. does your average user bother to install them? no of course not.
 
Normal users do not see cookies as malicious. There used to be exploits that acted similar to adware but those are all but gone. BH techniques are a lot less known. I don't see people using these features.
 
Plus Internet Explorer no matter what version has a history of being picked apart and exploited ;)
 
also it is worth noting that flash stuffing can circumvent IE third party cookie restrictions.
 
Yeah watch how quick users get annoyed constantly blocking cookies
 
You also have to realize how annoying as hell it will be to have all the cookie warning and such activated for an average user just surfing the web. Almost every website you visit these days will attempt to drop a cookie. Even if it isn't the website itself attempted to drop a cookie it could be the adnetwork on the site. So I'm sure most people except those who are really paranoid will turn off such features. Ofcourse those who are really concerned or wanting to detect cookies could to this already with other tools so it changes nothing really.
 
i think the important question isnt how will it treat cookies. I mean thats important if you're cookie stuffing but whats much more important is how it handles passing referers via meta and apache redirects.
 
99% of the surfers don't know what a cookie is, and 98% don't care
 
Back
Top