also @ TechSpot: Metro: Last Light Performance, Benchmarked

› ›

Google cookie data leak problem

By Derek Sooman

On January 17, 2005, 4:00 PM

For once, it’s Google in the spotlight for having security deficiencies. Security flaws in some of the company's Web-based products have been uncovered, in particular in Froogle comparison-shopping service.

According to Israeli security researcher Nir Goldshlager, a malicious hacker could exploit the hole by embedding a JavaScript in a URL pointing to Froogle. Once the link is clicked, the JavaScript triggers a browser redirect to a malicious Web site where the target's Google cookie is stolen.

Google has replied that the vulnerability has since been fixed. However, Israeli security researcher Nir Goldshlager, who provided proof-of-concept exploits of the cross-site scripting scenarios to Google, warned that information from stolen cookies can be used even if the password is changed.

"The system authenticates the hacker as the victim, using the stolen cookie file. Thus no password is involved in the authentication process. The victim can change his password as many times as he wants, and it still won't stop the hacker from using his box," Goldshlager said.

No tags on this story

Post a comment

Post a new comment

Social Login & Guest Posting TechSpot Members
Login here or sign up for free,
it takes about a minute.
Get complete access to the TechSpot community. Join thousands of technology enthusiasts that contribute and share knowledge in our forum. Get a private inbox, upload your own photo gallery and more.
TechSpot on:

Most Popular

Trending Featured
More Trending Topics

Featured on Cameras

Downloads and Drivers

Downloads   Drivers  

Dropbox for Android 2.3.8

IObit Malware Fighter 2.0

Wise Folder Hider 1.35.71

HelpNDoc 3.9.1

Sublight 4.0

More Downloads

Latest Discussion

Unsure if my new graphics card will work with my PC 8 replies on Audio and Video

Which is the best smartphone to buy? 16 replies on Mobile Computing

The average life of a GPU 15 replies on Audio and Video

How to bypass Iran's Gov filters on Internet 26 replies on Software Apps

Which Wireless Network Card for my MOBO ? 6 replies on Storage and Networking

More Recent Discussion

Subscribe to TechSpot

Get free exclusive content, learn about new features and breaking tech news.