CyberKnowledge Technology Blog

Previously I blogged about a flaw in Gmail’s contact list that could allow an attacker to steal your contact list. However today’s Google flaw seems to be much worse. The following is a short list of some of the things you can do upon a successful attack. Get in to Google Docs and Spreadsheets application and read and modify documents saved there. Read subjects from GMail, including part of the first sentence. Access the personalized homepage. View Google Accounts page. Enter Google... (more...)

In the wake of the Wii and PS3, scammers ran rampant on eBay. There were hundreds of daily auctions for Wii receipts, boxes, and email addresses. Gullible people not reading the auctions before bidding paid hundreds for these items, and PayPal refused to assist the buyer most of the time. With the release of the iPhone, the same thing is starting to appear. Already there are a dozen or so people trying to sell “iPhone email addresses”. They claim these email addresses will assist... (more...)

Over the past few months I’ve been using HostMonster hosting. Their customer support is great, and so is their service. However, I’ve decided to move on to a dedicated server to improve website performance. Using a dedicated server I can customize any part of this blog I want. So just what is under the hood of CyberKnowledge? Operating System: Cent OS 4.4 Database: MySql 5.0.22 PHP: 5.1.6 WebServer: Lighttpd with FastCGI PHP Cache: XCache which has cached 10 megabytes of PHP... (more...)

Earlier I reported that Google had a flaw in which it stores contact details in a JavaScript file on their server. A website could in return declare the function “google”, and put all your contacts and their details into an array. From there it could have been parsed and sent to the malicious server using Ajax. Earlier today there were reports on zdnet that said the flaw was fixed, however at the time it wasn’t true. Currently as of 8 PM EST the flaw has been fixed. When... (more...)

Using a form of cross scripting, it becomes easy to steal a GMail user’s contact list if they visit a certain type of website. The only condition is you have to be logged in to GMail at the time of the attack. GMail is setup to store your contact list in javascript files, which is the core problem. If you log into your GMail account, and click here, you’ll see your contact’s details, along with their email. I’ve tried the hack on IE7, Opera, and Firefox; it appears to... (more...)

As I was browsing the websites of Wal-Mart and Target I noticed Unreal Tournament 2007 with a release date. I have read that it will be released in the first quarter of 2007, but had not seen an exact date. Wal-Mart has a release date set for January 5th, 2007 and also provides a preview video for all you curious people out there. Target also has a release date set, but theirs is set for January 8th, 2006. The game is currently only being sold for PC, so all of you PlayStation 3 fan boys out... (more...)