Google Buzz bug exposes user geo location
16.02.2010. u 21:54 · pre 203 meseci
#1
http://www.theregister.co.uk/2010/02/16/google_buzz_security_bug/
Already besieged by complaints of shoddy user privacy, Google Buzz is susceptible to exploits that allow an attacker to commandeer accounts and even learn where victims are located, a security researcher said Tuesday.
The XSS, or cross-site scripting, vulnerability is unusual because it affects google.com, the domain that sets authentication cookies for a variety of popular Google services, including Mail, Calendar and Documents. That means an attacker might be able to hijack victims' account simply by tricking them into visiting a booby-trapped link.
What's more, the vulnerability ties into to the much-vaunted Google Location Services, making it possible for the attacker to learn the geographical location of users who have already opted in.
Uzivajte u oblacima... ovakve stvari su samo sneak-preview sveta kada masa ljudi bude "zivela" u nekom "cloud" servisu...
Pitanje je vremena kada ce se desiti prvo ubistvo uz pomoc "oblaka" #)*@(&@#
Citat:
Already besieged by complaints of shoddy user privacy, Google Buzz is susceptible to exploits that allow an attacker to commandeer accounts and even learn where victims are located, a security researcher said Tuesday.
The XSS, or cross-site scripting, vulnerability is unusual because it affects google.com, the domain that sets authentication cookies for a variety of popular Google services, including Mail, Calendar and Documents. That means an attacker might be able to hijack victims' account simply by tricking them into visiting a booby-trapped link.
What's more, the vulnerability ties into to the much-vaunted Google Location Services, making it possible for the attacker to learn the geographical location of users who have already opted in.
Uzivajte u oblacima... ovakve stvari su samo sneak-preview sveta kada masa ljudi bude "zivela" u nekom "cloud" servisu...
Pitanje je vremena kada ce se desiti prvo ubistvo uz pomoc "oblaka" #)*@(&@#
Potpis
DigiCortex (ex. SpikeFun) - Cortical Neural Network Simulator:
http://www.digicortex.net/node/1 Videos: http://www.digicortex.net/node/17 Gallery: http://www.digicortex.net/node/25
PowerMonkey - Redyce CPU Power Waste and gain performance! - https://github.com/psyq321/PowerMonkey
http://www.digicortex.net/node/1 Videos: http://www.digicortex.net/node/17 Gallery: http://www.digicortex.net/node/25
PowerMonkey - Redyce CPU Power Waste and gain performance! - https://github.com/psyq321/PowerMonkey
