2008 a few weeks ago, researchers Nitesh Dhanjani and Billy Rios reported that phishing site creators frequently hardcode e-mail addresses into the code in order to receive copies of the personal information submitted independent of where the Web form is being sent.īrooks says upon realizing what each of the e-mails contained, he then deleted all the mail and emptied the trash. In other words, whenever anyone signed up for the program, as Brooks had, a copy of his or her username and password was sent to John Terry's Gmail account. There, Brooks alleges he found 1,777 messages, all of which had username and passwords for people who signed up for the G-Archiver, including his own. Thinking that was a little strange, Brooks used the hardcoded information to open John Terry's Gmail account. Inside the source code Brooks found the program author's e-mail address and account password for Gmail. Brooks says that after installing the program, it didn't do all he was looking for so he decided to reverse engineer the source code using a program called Reflector for. He signed up for a program called G-Archiver distributed by Mate Media of Miami, Fla.
#Webcam archiver password archive
Over the weekend, Brooks said in an e-mail to that he was looking for a program that would archive his Gmail account onto his local hard drive. In looking for a program to back up his Gmail account, programmer Dustin Brooks found a commercial program that instead copies username and password information, according to a blog on.
0 kommentar(er)
