Uh-oh, Internet Explorer is affected by the same bug, and it was actively exploited. Just look for spam mail advertizing ro1ex.com and va1ium.com.
In other words, this is not a browser bug. You just can't infer the authenticity of a web site based on its name (or its SSL certificate).
Posted by Florian Weimer at February 7, 2005 12:25 PMHey Ian,
This is one of a whole class of bugs to be found in the firefox code base...
go to www.spoofstick.com for a firefox extension that performs independent verification of the website being currently viewed.
suprised the schmoo.com kids didnt pick up on this one...
BTW no bucks no buck rogers(to quote RAH)
M and I WONT make dominica at the end of the month.. will you??
you know the address already to return mail
warm regards,
gwen hastings