Google Blacklist Contained Confidential Information - GoFuckYourself.com

just a punk · 01-24-2007, 10:05 AM

Internet security firm Finjan will confirm on Monday that Google?s much-discussed anti-phishing blacklist contained confidential usernames and passwords of individuals, including credentials for accounts at banks and other financial institutions. See the screen shot below for an example - click for a larger view.

Google?s current anti-phishing blacklist, which has no access protection, is here. It?s It used by the Google Safe Browsing for Firefox extension which is now part of the Google Toolbar for Firefox, according to Michael Sutton, who has spent some time analyzing it.

Google has not publicly discussed the error, although they quietly removed the offending data. They have, however, acknowledged it in email correspondence with Finjan, which was forwarded to me. Google has since removed the confidential data.

This is nowhere near as serious an issue as the AOL search data released in August 2006. However, a public statement by Google on the issue is warranted, along with confirmation that they have attempted to contact the affected individuals.

Source: http://www.techcrunch.com/2007/01/21...l-information/

SmokeyTheBear · 01-24-2007, 01:57 PM

obviously not as bad as the AOL one but still pretty bad. Sites that pass your username and password in the url arent very smart.. Many adult sponsors pass along userdata the same way. This should be a heads up for them to fix.

madawgz · 01-24-2007, 02:00 PM

who spends their time searching thru that?

it looks fucking long

01-24-2007, 10:05 AM	#1
just a punk So fuckin' bored Industry Role: Join Date: Jun 2003 Posts: 32,391	Google Blacklist Contained Confidential Information Internet security firm Finjan will confirm on Monday that Google?s much-discussed anti-phishing blacklist contained confidential usernames and passwords of individuals, including credentials for accounts at banks and other financial institutions. See the screen shot below for an example - click for a larger view. Google?s current anti-phishing blacklist, which has no access protection, is here. It?s It used by the Google Safe Browsing for Firefox extension which is now part of the Google Toolbar for Firefox, according to Michael Sutton, who has spent some time analyzing it. Google has not publicly discussed the error, although they quietly removed the offending data. They have, however, acknowledged it in email correspondence with Finjan, which was forwarded to me. Google has since removed the confidential data. This is nowhere near as serious an issue as the AOL search data released in August 2006. However, a public statement by Google on the issue is warranted, along with confirmation that they have attempted to contact the affected individuals. Source: http://www.techcrunch.com/2007/01/21...l-information/ __________________ Obey the Cowgod

01-24-2007, 01:57 PM	#2
SmokeyTheBear ►SouthOfHeaven Join Date: Jun 2004 Location: PlanetEarth MyBoardRank: GerbilMaster My-Penis-Size: extralarge MyWeapon: Computer Posts: 28,609	obviously not as bad as the AOL one but still pretty bad. Sites that pass your username and password in the url arent very smart.. Many adult sponsors pass along userdata the same way. This should be a heads up for them to fix. __________________ hatisblack at yahoo.com

01-24-2007, 02:00 PM	#3
madawgz 8.8.8.8 Industry Role: Join Date: Mar 2006 Location: Noordermarkt Posts: 30,509	who spends their time searching thru that? it looks fucking long __________________ TAEMDLRMSKRJIXMRLSMRJ.