Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos



Full Disclosure: Re: Google Desktop Search

Re: Google Desktop Search

From: Dave King <davefd_at_davewking.com>
Date: Fri, 15 Oct 2004 08:54:01 -0600

If you noticed during the install, it gives you the opportunity to
include https pages in web history caching. When it said this it made
me curious since I didn't know it indexed web history at all, but
apparently it does and this option can be disabled on the preferences
page if you don't want it.

I tried to reproduce what you said happened with Hotmail and it did
index the messages I have viewed and brought them up in the search
results, and it did let me view a cached copy without a
username/password, but it did not allow me to access the real message in
my account without my username/password. Are you set to login
automagically?

Dave King
http://www.thesecure.net

DogoBrazil wrote:

> Hi everybody!
>
> I decided to test Google Desktop Search yesterday, 10-14-04. It's
> supposed to seach almost any kind of information "inside my
> hard-drive". In the beginning I put my nick to play with, Dogo. The
> research came with a bit more than I expected 'cause the engine went
> to some webmail based accounts: Yahoo and MSN. I could click in the
> results and opened my Yahoo Mail inbox page without a password. Maybe
> some password lost in my HD? Maybe some page cached? I really don't
> know yet but didn't like to see my mail exposed this way.
> Well, I just used for maybe 20 minutes until the index was being
> prepared. I uninstalled the tool.
> Did someone try it? Any opinion?
>
> Cheers!
>
> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.netsys.com/full-disclosure-charter.html
>
>

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html
Received on Oct 15 2004

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]