Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: Google Desktop Search
From: "Mary Landesman" <mlande () bellsouth net>
Date: Fri, 15 Oct 2004 11:34:51 -0400

From their privacy policy:

-------------------------------
Your copy of Google Desktop Search includes a unique application number.
When you install Google Desktop Search, this number and a message indicating
whether the installation succeeded is sent back to Google so that we can
make the software work better. Additionally, when Google Desktop Search
automatically checks to see if a new version is available, the current
version number and the unique application number are sent to Google. If you
choose to send us non-personal information about your use of Google Desktop
Search, the unique application number with this non-personal information
also helps us understand how you use Google Desktop Search so that we can
make it work better. The unique application number is required for Google
Desktop Search to work and cannot be disabled.
-------------------------------

The unique application number is required for Google Desktop Search to
work and cannot be disabled. <<

I have to wonder why that is.

-- Mary

----- Original Message ----- 
From: "Ivan Krstic" <krstic () fas harvard edu>
To: "DogoBrazil" <dogobrazil () spymac com>
Cc: <full-disclosure () lists netsys com>
Sent: Friday, October 15, 2004 10:14 AM
Subject: Re: [Full-disclosure] Google Desktop Search


DogoBrazil wrote:
The research came
with a bit more than I expected 'cause the engine  went to some webmail
based accounts: Yahoo and MSN. I could click in the results and opened
my Yahoo Mail inbox page without a password. Maybe some password lost in
my HD? Maybe some page cached?

http://desktop.google.com/index.html enumerates the file types that
Google Desktop Search currently indexes. Your IE cache and Outlook
correspondence will also get indexed, so you could have been looking at
either a page from your browser cache, or a page you manually saved to
your hard drive. The program itself most certainly does not include
functionality to index remote, web-based mailboxes such as Yahoo and MSN.

Ivan

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]