full-disclosure - Google Desktop Search

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

From: xploitable at gmail.com (xploitable)
Subject: Google Desktop Search

On Fri, 15 Oct 2004 05:42:26 -0700 (PDT), Dogo <nikopol59@...oo.com> wrote:
> Hi everybody!
> 
> I decided to test Google Desktop Search yesterday, 10-14-04. It's supposed to seach almost any
> kind of information "inside my hard-drive". In the beginning I put my nick to play with, Dogo. The
> research came with a bit more than I expected 'cause the engine  went to some webmail based
> accounts: Yahoo and MSN. I could click in the results and opened my Yahoo Mail inbox page without
> a password. Maybe some password lost in my HD? Maybe some page cached? I really don't know yet but
> didn't like to see my mail exposed this way.
> Well, I just used for maybe 20 minutes until the index was being prepared. I uninstalled the tool.
> 
> Did someone try it? Any opinion?
> 
> Cheers!
> 
> _______________________________
> Do you Yahoo!?
> Declare Yourself - Register online to vote today!
> http://vote.yahoo.com
> 
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
> 




Sounds like its as fundamentally flawed as Yahoo!s "My Search",
http://mysearch.yahoo.com :-)



-- 
visit http://www.geocities.com/n3td3v