A funny hoax scares users

We have been receiving lot of messages asking us to help and give a word of advice on "how to prevent my hard drive from being viewed over the Net" and "how to close this security hole". So what is this frightening vulnerability that shocked so many users? We know at least two web-sites claiming there is a vulnerability ("Your pc is open for file sharing") that allows exploring hard drives of the visitors. Below these statements users can see an evidence of the vulnerability that is a window with contents of disk C. You can even browse you hard drive and copy/delete/edit files.

But there is no need to worry about. This is not a vulnerability but a funny hoax. Actually owners of those web-sites cannot see visitors' hard drives. What they can do is just to display visitors their hard drive's content by utilizing iframe tag with source set to disk C.

Here is a demonstration of how this tag works:



In other words, this hoax acts like a mirror that displays a reflection of person looking at it. But this mirror is not a camera and cannot "save" or "display" images to its owner.

Please note that iframe tag seems to work in Internet Explorer only.

Discuss this article on the Forum