lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
From: Thierry at sniff-em.com (Thierry Zoller)
Subject: Google Search and Gmail Correlation

Dear Cody Hatch, Dear List,

I haven't already send this to the list as I thought it's a minor "could be
problem", but while at it I might also point to my findings in late
december about Microsofts potential to monitor Urlbar queries (cookies are
transmited aswell), even if the results are shown by Google / Yahoo / Lycos.

Windows XP SP2 SearchUrl hijack lock circumvention.
Issue #1  Microsoft may monitor every search from within Internet Explorer location bar.
Issue #2  Protection against search url modification can be
          circumvented. (minor problem)
          
URL: http://www.sniff-em.com/sp2note.html




-- 
Thierry Zoller
mailto:Thierry@...ff-em.com



Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ