<![CDATA[Holtz Communications + Technology | Blog]]> https://holtz.com/blog blogging at the intersection of communication and technology en shel@holtz.com Copyright 2025 Holtz Communications + Technology 2025-07-28T07:05:00+00:00 <![CDATA[RSS exposes users to attack]]> https://holtz.com/blog/blog/rss_exposes_users_to_attack/1444/ https://holtz.com/blog/blog/rss_exposes_users_to_attack/1444/#When:16:06:00Z ZDNet reports from the Black Hat conference in Las Vegas that security experts are increasingly concerned about the potential for malicious attacks perpetrated through web feeds.

SPI Dynamics examined a number of online and offline applications used to read RSS and Atom feeds. In many cases, any JavaScript code delivered on the feed would run on the user’s PC, meaning it could be vulnerable to attack…JavaScript is a scripting language that experts say is increasingly causing security concerns.

One wonders when news readers will start coming equipped with detection software. The article notes there are “non-vulnerable” readers, but doesn’t list them. Some that are vulnerable include Bloglines, RSS Reader, RSS Owl, Feed Demon and Sharp Reader.

]]> 2006-08-04T16:06:00+00:00