Skip to Content

Category Archives: Information Leakage

Your hidden friends, betrayed by their like

Written on September 25, 2013 at 6:50 am, by

Graph Search as a privacy tool According to Facebook, Graph Search not only helps people finding information about their friends, it also helps them to know what information they reveal about themself. I find this objective questionable especially in France where many people are still not aware that Graph Search even exist [1] and yet […]

A list of Google services vulnerable to Session hijacking

Written on October 22, 2011 at 11:56 pm, by

After finding an information leakage in Google Search, I’ve been curious to see if there were no other pieces of information that could be gleaned from other Google services. To verify this, I visited my Google Dashboard, replaced my SID cookie and clicked on all the HTTP services that were listed. My first attempt failed […]

Show me your Cookie and I’ll tell you what you visited

Written on July 19, 2011 at 9:34 pm, by

Web Search History Information Leakage Back in February, I re-discovered a small flaw in Google Search: result personalization leaks the list of results you clicked on. This leak was already known and mentioned in a paper by Castelluccia et al., but several features added by Google made it critical. First there is the possibility (for […]