If you’re using Apple’s Safari browser, your personal information may be at risk. According to security researcher Jeremiah Grossman, Safari users could be unknowingly revealing personal data to third party sites, thanks to a flaw in the browser’s security framework. As the New York Times reports, the bug exploits Safari’s auto-fill function, and can allow sites to access a user’s name, address, e-mail, phone number or any other personal information that Mac users store in their address books. “We take security and privacy very seriously,” Apple said in a statement. “We are aware of the issue and working on a fix.”
Grossman, who works at WhiteHat Security, actually first notified Apple of the flaw back in June. Upon sending an alert e-mail, though, he received only an automated response, and never heard any more from them. So, he decided to go public with it, and published his findings on his personal blog. The most dangerous part of the flaw, according to Grossman, is the ease with which any site could exploit it. “It is very easy to do,” he said, in an interview. “We can only assume that other people have used it.”
Continue reading Apple Confirms Safari Auto-fill Flaw that Reveals Personal Information
Apple Confirms Safari Auto-fill Flaw that Reveals Personal Information originally appeared on Switched on Fri, 23 Jul 2010 12:40:00 EST. Please see our terms for use of feeds.
Read | Permalink | Email this | Comments
Each month, the news gets worse for Microsoft’s Internet Explorer. The BBC reports that the latest numbers from several measurement firms 
Reports from a publishing industry event held Tuesday afternoon suggest Google will launch the 
