Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security FullDisclosure
[Top] [All Lists]

Re: [Full-Disclosure] Google Search and Gmail Correlation

Subject: Re: [Full-Disclosure] Google Search and Gmail Correlation
Date: Thu, 24 Feb 2005 14:01:06 +0100
Dear Cody Hatch, Dear List,

I haven't already send this to the list as I thought it's a minor "could be
problem", but while at it I might also point to my findings in late
december about Microsofts potential to monitor Urlbar queries (cookies are
transmited aswell), even if the results are shown by Google / Yahoo / Lycos.

Windows XP SP2 SearchUrl hijack lock circumvention.
Issue #1  Microsoft may monitor every search from within Internet Explorer 
location bar.
Issue #2  Protection against search url modification can be
          circumvented. (minor problem)
          
URL: http://www.sniff-em.com/sp2note.html




-- 
Thierry Zoller
mailto:Thierry@sniff-em.com


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

<Prev in Thread] Current Thread [Next in Thread>