Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Re: Google Desktop Search
From: Etaoin Shrdlu <shrdlu () deaddrop org>
Date: Fri, 15 Oct 2004 07:50:06 -0700

Dogo wrote:

Hi everybody!

I decided to test Google Desktop Search

Hope that this was just a test machine. I would have been a bit nervous to try this on anything I needed, myself.

...In the beginning I put my nick to play with, Dogo. The
research came with a bit more than I expected 'cause the engine  went to some webmail based accounts: Yahoo and MSN. I 
could click in the results and opened my Yahoo Mail inbox page without a password.

Perhaps you have something that says funnel all email to a specific account; perhaps you *do* have a "remember my password" set somewhere. Lots of perhaps here; you might want to ghost the drive, and do a little forensics off line, to see if there are presents left behind.

Well, I just used for maybe 20 minutes until the index was being prepared. I uninstalled the tool.

You *hope* you uninstalled it. Checked the registry? Sounds a bit to me like Google is working to be the next Big Blue/Microsoft. Excellent. Survival of the fittest.

Did someone try it? Any opinion?

I'd recommend that someone try a couple of installs on a private network, and watch what goes in or out. Sounds interesting, for certain values of interesting.

You've confused equality of opportunity for equality of outcomes,
and have seriously confused justice with equality.
                               -- Woodchuck

Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]