Ask a Question My Questions Answer Forum FAQs My Account

Display Forum Question

Search for keyword(s) in Westchester County, NY
Question
   Question    posted to Computer Repair Technicians on 02/05/09 10:18 PM, Croton on Hudson, NY 10520
I have windows xp, desktop, word 2007, 2003 package word, excel, etc.
problem. i just got a job working as a writing tutor from home, on my computer. tutors have to use internet explorer. The company is called Smarthinking and when I go into the Program, I'm able to sign in and get to the page that lists choices i.e., scheduling hours. When I click on Scheduling Hours the page comes up and is blocked by another page that says IE has modified this page to help prevent cross scripting. I've spent hours on this, I took it to a tech shop and the tech department at my job all worked on it and couldn't figure it out. So i won't have a job unless I figure it out. Thank you for your help.
read more...
Specialist Answer 1 of 3
   Answered By     Westech Solutions, 02/05/09 10:25 PM
Westech Solutions
64 Jackson Rd.
Bedford, NY 10506
914-234-6829
Email Company
View Business Info

My name is Douglas Holdgrafer. I own a small I/T company by the name of WesTech Solutions, LLC that serves residents and small businesses in Westchester County. Seeing as this is somewhat of a pressing issue, I can help you remotely if you'd like this evening. Feel free to call until midnight at (914)234-6829.

Specialist Answer 2 of 3
   Answered By     Computer Tutor / Team LogicIT, 02/05/09 10:48 PM
Computer Tutor / Team LogicIT
405 Tarrytown Rd
Suite 1075
White Plains, NY 10607
914-337-1700
leslie.raffo@pro2tec.com
View Business Info

Cross site scripting is caused by a browser attack. The hacker has installed a trojan on your computer that intercepts your web session with your employer and uses the session to steal information from your PC. IE detects and prevents this from happening.

We have successfully removed these viruses, however, you should be aware that in some instances the virus has imbedded itself so deeply into the operating system that it required us to completely re-install Windows.

Our firm Pro2Tec provides IT services for home, home office and small to mid-sized companies. Our services included preventitive care, repair, appliaction support, hosting and more.

Visit us at www.pro2tec.com.

read more...
Specialist Answer 3 of 3
   Answered By     Consult A Pro, Inc, 02/06/09 01:15 AM
Consult A Pro, Inc
169 S. Main Street #356
New City, NY 10956
845-426-5922
info@consultapro.com
View Business Info

According to what you are saying my research comes up with the following.

You are actually witnessing a potential security breach—not necessarily against the site, but rather against you directly.

A CSS vulnerability is caused by the failure of a site to validate user input before returning it to the client’s web-browser. The essence of cross-site scripting is that an intruder causes a legitimate web server to send a page to a victim's browser that contains malicious script or HTML of the intruder's choosing. The malicious script runs with the privileges of a legitimate script originating from the legitimate web server.

 

The best protection is to disable scripting when it isn’t required. However, even this does not prevent the injection of malicious HTML. You should also protect yourself by accessing security sensitive pages directly instead of following links from unknown sources, or untrusted sites. For example, don’t trust a link to your banking site that is in an email message. If you need to access your banking site, go there directly. And, as always, exercise caution when supplying personal information

If you notice an instance of cross-site Scripting notify the webmaster of that site, and cc the CERT Coordination Center.

Unfortunately, security is often sacrificed in favor of functionality. But, if you browse the Internet with scripting enabled, there is very little you can do to protect your personal information. Cross-site scripting is easy to overlook, and simple to correct. However, it can cause significant damage–your passwords and credit card numbers can be unknowingly divulged to untrusted sources.

So to sum it up ... this problem exsists in the web page that you are visiting, you yourself can NOT fix this, thus the attempts by co-workers and such have failed. You need to explain this to the webmaster of the offending page as they have most likely been infected with a CSS injection.

It's a bit complicated, hope I helped.

For computer service and maintenance, give us a call.

Jeffrey S. Cohen

VP

Consultapro.com

 

 

 

 

 

read more...
Login to Reply
The content posted on ZOOMNIA has not been evaluated for accuracy, and ZOOMNIA does not guarantee either its accuracy or
its relevance for any particular situation. Click here for the full Disclaimer.
© ZOOMNIA Corporation