Fishkin Tutorial Time: Stealing user data with auto complete

  • Thread starter Thread starter Banned member 185991
  • Start date Start date
wow that was quick but people that fall for im tricks dont read security blogs
I'm sure Google, Firefox and whoever else is on it or will be later today if it's being reported in the news. That Finnish guy should have sold the loophole to G/Firefox.
 
@Ste Fishkin's real name exposed - Viljami Kuosmanen

Finnish web developer and hacker Viljami Kuosmanen discovered that several web browsers, including Google’s Chrome, Apple’s Safari and Opera, as well as some plugins and utilities such as LastPass, can be tricked into giving away a user’s personal information through their profile-based autofill systems.

The prick forgot my link.

Worse guest posting service ever.
 
If you need access to strangers laptops and their uncleared browsers then how is this useful in a non-criminal way? I'm not seeing a legit angle on this.

-ThopHayt
 
Oh wait... you're saying a website can grab a browser's auto complete info when a user uses that site's forms? That definitely eliminates the need to go snooping in laptops... still not sure how I'd ever use it. But interesting/scary in a lot of way.

-ThopHayt
 
If you need access to strangers laptops and their uncleared browsers then how is this useful in a non-criminal way? I'm not seeing a legit angle on this.

-ThopHayt
It depends on you what you wanna do with the collected data, but yeah true blackhat trick.
 
Lovely browser flaw. But will be patched in days.
 
Even if it's not something new....this is the shit I want to see on a blackhat forum. Lately bhw became a faggy forum with threads like "My girlfriend left me it hurts I need advice" WTF who the fux care? We are here to make money not to lick each other balls.
Wot? Thought this was a gay webmaster forum. Lick my balls m8
 
Doesn't those plugins and the vanilla autocomplete, depend on the name attributes and field types?

That's one reason why I prefix &| suffix my field names and use proper field types.
 
Back
Top