Via Threadwatch, Engadget’s summary of a serious bug in Google’s Gmail, where web sites can retrieve your Gmail contact list, through a JavaScript loophole, has now been fixed. The bug allowed web sites to pull your Google contact list, if you were still logged into your Google account and had JavaScript enabled (which is most […]
ShoeMoney wrote a detailed write up on how hackers can easily use Google Code Search to quickly find sites that are vulnerable to being hacked. ShoeMoney shows XSS exploits, SQL injection exploits and more. ShoeMoney wasn’t the first to spot this. SEO Egghead wrote about some examples on October 5th. Is Google to blame? I […]
A new survey from McAfee finds that AOL has the "safest" search results in terms of not listing sites that might be somehow be risky or unsafe for searchers. But most interesting to me was the fact paid results across the board were found far riskier than free, organic results. Let’s do the numbers, some […]