<xmp><body><script type="text/javascript"><!--//--><![CDATA[//><!-- var cm_role = "live"; var cm_host = "angelfire.lycos.com"; var cm_taxid = "/memberembedded"; var angelfire_member_name = "on3/vxdoin2"; var angelfire_member_page = "on3/vxdoin2/ZAHack.html"; var angelfire_ratings_hash = "1329460807:11b9db1a919e0f77444b1aad1dc8b0de"; var lycos_ad_category = {"dmoz":"computers\/systems","ontarget":"&CAT=technology&L2CAT=computing&L3CAT=hardware","find_what":"me windows"}; var lycos_ad_remote_addr = "38.107.179.210"; var lycos_ad_www_server = "www.angelfire.lycos.com"; var edit_site_url = "www.angelfire.lycos.com/landing/landing.tmpl?utm_source=house&utm_medium=landingpage&utm_campaign=toolbarlink"; var lycos_ad_track_small = "http://www.angelfire.com/doc/images/track/ot_smallframe.gif?rand=918637"; var lycos_ad_track_served = "http://www.angelfire.com/doc/images/track/ot_adserved.gif?rand=918637"; function getQuery() { var rfr = '(none)'; // Get the referrer search query, if available. if (rfr == '') return false; var q = extractQuery(rfr, 'yahoo.com', 'p='); if (q) return q; q = extractQuery(rfr, '', 'q='); return q ? q : ""; } function extractQuery(full, site, q_param) { var start = full.lastIndexOf(site); if (start == -1) return false; start = full.lastIndexOf(q_param); if (start == -1) return false; start += q_param.length; var end = full.indexOf('&', start); if (end == -1) end = full.length; return unescape(full.substring(start, end)).split(" ").join("+"); } //--><!]]></script> <script type="text/javascript" src="http://scripts.lycos.com/catman/init.js"></script> <script type="text/javascript" src="http://www.angelfire.com/sys/ad/code-start.js"></script> <script type="text/javascript" src="http://www.angelfire.com/sys/ad/code-middle.js"></script> <script type="text/javascript" src="http://www.angelfire.com/sys/ad/code-end.js"></script> <noscript> <img src="http://www.angelfire.com/doc/images/track/ot_noscript.gif?rand=918637" alt="" width="1" height="1" /> <!-- BEGIN STANDARD TAG - 728 x 90 - Lycos - Angelfire Fallthrough - DO NOT MODIFY --> <iframe frameborder="0" marginwidth="0" marginheight="0" scrolling="no" width="728" height="90" src="http://ad.yieldmanager.com/st?ad_type=iframe&amp;ad_size=728x90&amp;section=280303"></iframe> <!-- END TAG --> </noscript> <!-- begin compete js --> <script type="text/javascript"> __compete_code = '667f89f26d96c30e99728fe6a608804d'; (function () { var s = document.createElement('script'), d = document.getElementsByTagName('head')[0] || document.getElementsByTagName('body')[0], t = 'https:' == document.location.protocol ? 'https://c.compete.com/bootstrap/' : 'http://c.compete.com/bootstrap/'; s.src = t + __compete_code + '/bootstrap.js'; s.type = 'text/javascript'; s.async = 'async'; if (d) { d.appendChild(s); } }()); </script> <!-- end compete js --> <!-- quantcast --> <script type="text/javascript"> function channValidator(chann){ return (typeof(chann) == 'string' && chann != ''); } function lycosQuantcast(){ var lb = ""; if(typeof(cm_host) !== 'undefined' && channValidator(cm_host)){ lb += cm_host.split('.')[0] + '.'; } if(typeof(cm_taxid) !== 'undefined' && channValidator(cm_taxid)){ lb += cm_taxid; lb = lb.replace('/',''); } else { lb = lb.replace('.',''); } return lb; } var _qevents = _qevents || []; (function() { var elem = document.createElement('script'); elem.src = (document.location.protocol == "https:" ? "https://secure" :"http://edge") + ".quantserve.com/quant.js"; elem.async = true; elem.type = "text/javascript"; var scpt = document.getElementsByTagName('script')[0]; scpt.parentNode.insertBefore(elem, scpt); })(); _qevents.push({ qacct:"p-6eQegedn62bSo", labels:lycosQuantcast() }); </script> <!-- end quantcast --> </xmp>

Zone Alarm Test

Have only Zone Alarm running during for this test(the test is for Zone Alarm only - all versions)

CLICK HERE AND CHOOSE RUN FROM CURRENT LOCATION.

Once complete, leave the Window open and check your Zone Alarm status on your taskbar and read the results on the screen. Did you pass?

This proves what a joke Zone Alarm is to the very people you are trying to protect yourself from.

This hack was reported to Zone Labs.

Tell me, did Zone Labs report it to you before you purchased it or downloaded the free version?

A Zone Lab response:

ZoneAlarm is a consumer product designed to be easy to install and use. For consumers trying a free product, it is especially important that we provide out-of-the-box security that does not compromise your Internet connection or become impossible to remove from the computer. At Zone Labs, we believe we have struck the best balance between effective out-of-the-box security and ease of use. ZONE LABS

Interesting eh?

Note that in the "real virtual" world this would not be just an innocent test. You would not be aware of the attack and you would not be able to activate Zone Alarm to protect you. And it would be very easy to incorporate malicious code into it.

And this is just one example of a ZA flaw. There are other ways to break through the ZA barrier as well.

Find out more in the archives of WinTips&Tricks or post your questions - comments to the board.