Google Fixes Search Engine Security Flaw
117004
Google fixed its new Desktop Search tool and publicly thanked the three computer scientists for their work. They published their findings on the Web site of the Computer Security Lab at Rice University.
260181
Researchers at Rice University have discovered what they say is a flaw in the beta version of Google&#39;s (Profile, Products, Articles) Desktop Search product that could allow
482861
InfoWorld - Google&#39;s PC search software is vulnerable to a variation on a little-known Web-based attack called anti-DNS&#160;pinning that could give an attacker access to any data indexed by Google Desktop, security researchers said this week.
406505
HOUSTON - A computer scientist and two of his graduate students at Rice University found a security flaw in a search tool distributed by Google, allowing the popular Web site to fix the problem.
16357
Blog: Random search strings in Google can yield sites hosting drive-by downloads of malicious content.
669952
Search engine leader Google has been forced to respond to a security vulnerability in its Google Desktop Search software, which reportedly made it possible for computer intruders to view desktop search results via the Web.
716677
Google responds to attacks on its privacy record.
103140
Google has said that the software flaw found in its Desktop Search utility has been fixed. The flaw allowed hackers to view information contained on a PC running the search software.
36786
The search engine sometimes plays "tricks" with its secret page-ranking algorithm.
85579
(InfoWorld) - Google Inc. has inadvertently given online attackers a new tool. The company'sÂ new source-code search engine, unveiled Thursday as a tool to help simplify life for developers, can also be misused to search for software bugs, password information, and even proprietary code that shouldn't have been posted to the Internet in the first place, security experts said Friday. UnlikeÂ Google's main Web search engine,Â Google Code Search peeks into the actual lines of code whenever it finds source-code files on the Internet. This will make it easier for developers to search source code directly and dig up open-source tools they may not have known about, but it has a drawback. "The downside is that you could also use that kind of search to look for things that are vulnerable and then guess who might have used that code snippet and then just fire away at it," said Mike Armistead, vice president of products with source-code analysis provider Fortify Software Inc. Attackers could also search code for vulnerabilities in password mechanisms, or to search for phrases within software such as "this file contains proprietary," possibly unearthing source code that should never have been posted to the Internet. Security experts say that the security implications of Google Code Search are noteworthy, if not earth-shattering. Skilled hackers may already be able to do this type of search with Google's Web search engine, but Code Search is "another tool that makes it a tad easier for the attacker," said Johnny Long, a security researcher with Computer Sciences Corp, in an e-mail interview. For its part, Google did not have much to say about possible misuse of its new product. "Google recommends developers use generally accepted good coding practices including understanding the implications of the code they implement and testing appropriately," the company said in a statement. Google has never said much about the steps it takes to cut down on this kind of misuse of its search engine, though the issue comes up from time to time.Â In July, Websense Inc. used a little know binary search capability within Google Inc.'s search engine to look for malware on the Internet. While Google Code Search will probably not have much of an effect on popular open-source projects, which are already heavily scrutinized, it could help ferret out vulnerabilities in lesser known pieces of code, according to Lev Toger, a software developer with Beyond Security Ltd. "Using Google's code search, it's much easier to find interesting code portions," he said via e-mail. "If your task is to find vulnerability in some random code, this filtering can save you a lot of time. " Â
266945
SAN FRANCISCO A university computer scientist and two of his students have discovered a potentially serious security flaw in the desktop search tool for personal computers that was recently distributed by Google.
665395
Just one day after Google's Firefox toolbar was revealed to have vulnerabilities that could be exploited in an online attack, a similar flaw has been discovered in Google Desktop.
134325
With four in the last week, is Google the next security buffoon? Analysis Google's desktop search application is vulnerable to an exploit that allows a determined attacker to remotely run most programs installed on a victim's machine. The flaw is one of at least four security holes to visit Google this past week, demonstrating that the search king, despite the god-like aura it enjoys for its pleasing software designs, remains a mere mortal in the security cosmos.â¦
462478
A flaw in Google&#39;s desktop search program was revealed on Monday by a team of computer researchers. They showed it could be used to capture valuable personal information from a remote user&#39;s computer.
172241
John Markoff in the New York Times reports that a computer science professor and two of his students have discovered a &quot;composition flaw&quot; in Google&#39;s desktop search application.
563048
Internet search giant Google&#39;s aficionados may just have lost some vital information that could hurt their wallet! Hackers exploiting a flaw in Google&#39;s desktop search tool launched a week back could have
553531
Google Inc. said on Thursday it fixed a flaw in its site that could allow outsiders to launch phishing attacks based on Google&#39;s familiar interface, and is working on a second fix for another similar vulnerability.