full-disclosure - Google Desktop Search

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: mlande at bellsouth.net (Mary Landesman)
Subject: Google Desktop Search

>From their privacy policy:

-------------------------------
Your copy of Google Desktop Search includes a unique application number.
When you install Google Desktop Search, this number and a message indicating
whether the installation succeeded is sent back to Google so that we can
make the software work better. Additionally, when Google Desktop Search
automatically checks to see if a new version is available, the current
version number and the unique application number are sent to Google. If you
choose to send us non-personal information about your use of Google Desktop
Search, the unique application number with this non-personal information
also helps us understand how you use Google Desktop Search so that we can
make it work better. The unique application number is required for Google
Desktop Search to work and cannot be disabled.
-------------------------------

>> The unique application number is required for Google Desktop Search to
work and cannot be disabled. <<

I have to wonder why that is.

-- Mary

----- Original Message ----- 
From: "Ivan Krstic" <krstic@....harvard.edu>
To: "DogoBrazil" <dogobrazil@...mac.com>
Cc: <full-disclosure@...ts.netsys.com>
Sent: Friday, October 15, 2004 10:14 AM
Subject: Re: [Full-Disclosure] Google Desktop Search


> DogoBrazil wrote:
> > The research came
> > with a bit more than I expected 'cause the engine  went to some webmail
> > based accounts: Yahoo and MSN. I could click in the results and opened
> > my Yahoo Mail inbox page without a password. Maybe some password lost in
> > my HD? Maybe some page cached?
>
> http://desktop.google.com/index.html enumerates the file types that
> Google Desktop Search currently indexes. Your IE cache and Outlook
> correspondence will also get indexed, so you could have been looking at
> either a page from your browser cache, or a page you manually saved to
> your hard drive. The program itself most certainly does not include
> functionality to index remote, web-based mailboxes such as Yahoo and MSN.
>
> Ivan