home bbs files messages ]

Just a sample of the Echomail archive

<< oldest | < older | list | newer > | newest >> ]

 Message 716 
 August Abolins to All 
 *Safari bug exposes Apple users' browser 
 18 Jan 22 14:53:26 
 
MSGID: 2:460/256 000002f5
PID: tg_BBS_v0.7.1
TZUTC: 0300
CHRS: cp866 2
TGUID: 1223717052
REPLYTO 2:460/256 1223717052
RealName: August Abolins 2:221/1.58
Hi All...

*Safari bug exposes Apple users' browser history and Google account details*

A bug in Safari?s IndexedDB implementation on Mac and iOS means a website can
see the names of databases for any domain, not just its own. (Independent) 

For instance, Google services store an IndexedDB instance for each of your
logged in accounts, with the name of the database corresponding to your Google
User ID.

Using the exploit described in the blog post, a nefarious site could scrape
your Google User ID and then use that ID to find out other personal
information about you, as the ID is used to make API requests to Google
services

Ciao!
 /|ug (https://t.me/aabolins)

--- Want fido for iOS/MacOS/Android/Win/Linux? Info=https://shrtco.de/tpJ9yV
 * Origin: Fido by Telegram BBS from Stas Mishchenkov (2:460/256)
SEEN-BY: 15/0 106/201 153/7715 229/110 317 426 664 266/512 280/464
SEEN-BY: 292/854 317/3 320/219 387/28 396/45 712/848 2320/105
PATH: 460/256 58 280/464 396/45 229/426


<< oldest | < older | list | newer > | newest >> ]

(c) 1994,  bbs@darkrealms.ca