Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: Google Desktop Search
From: Dave King <davefd () davewking com>
Date: Fri, 15 Oct 2004 08:54:01 -0600

If you noticed during the install, it gives you the opportunity to include https pages in web history caching. When it said this it made me curious since I didn't know it indexed web history at all, but apparently it does and this option can be disabled on the preferences page if you don't want it. I tried to reproduce what you said happened with Hotmail and it did index the messages I have viewed and brought them up in the search results, and it did let me view a cached copy without a username/password, but it did not allow me to access the real message in my account without my username/password. Are you set to login automagically?

Dave King
http://www.thesecure.net

DogoBrazil wrote:

Hi everybody!

I decided to test Google Desktop Search yesterday, 10-14-04. It's supposed to seach almost any kind of information "inside my hard-drive". In the beginning I put my nick to play with, Dogo. The research came with a bit more than I expected 'cause the engine went to some webmail based accounts: Yahoo and MSN. I could click in the results and opened my Yahoo Mail inbox page without a password. Maybe some password lost in my HD? Maybe some page cached? I really don't know yet but didn't like to see my mail exposed this way. Well, I just used for maybe 20 minutes until the index was being prepared. I uninstalled the tool.
Did someone try it? Any opinion?

Cheers!

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html




_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]