Google Desktop Vulnerable To Attack

[HardOCP News]

A security researcher has published details of a new attack on Google Desktop that can potentially allow an attacker to manipulate search results and take control of other programs on the desktop. Here’s how it works:

The attack scenario plays out like this: a user of Google Desktop makes a search query that is intercepted by an attacker. The attacker then injects Javascript that creates an invisible IFrame on the target URL page as well as makes the IFrame follow the user's mouse; the user is unaware. The attacker then injects more code to position a second query inside the user mouse IFrame. As the second query executes, the attacker then forces a meta-refresh to reload the page, and that forces Google Desktop to load as well as any program indexed by Google Desktop the attacker may desire. When user clicks the evil Google Desktop query, the malicious program executes.

 

[abcdelight]

I trust Google less for many things with each passing day.

 

[pulldownyourpants]

Garbage.

How many hackers have that much time on there hands to sit and do this? To gain what in how much time? Speed is the key in hacking and social engineering. You want as many PCs as fast as possible. Not just one to do god knows what kind of minimal damage.