Hi All,

Something odd happened today at work. Not really Fox related.

Our app (C#, WinForms) has a feature where on some screens you can
embed a web browser in a tab to display a user definable webpage. The
trouble is, the control is based on IE6 (?). We're in the process of
updating this to Microsoft Edge WebView2.

My tester contacted me today saying there's a funny folder with rude
words in it. Swear words.
What!??

I took a look. WebView2 will create a browser cache in the application
folder unless otherwise specified. We can fix that. But what about the
swear words?

It turns out that she was using www.googlemaps.co.uk as a test. If you
open this in a browser (*DO NOT DO THIS*) you get redirected to
maps.google.com and all looks fine.

In the cache folder a file called passwords.txt contains 30,000
passwords which are clearly the most common passwords (123456,
password, etc). It also contains words like 'motherfucker'. There are
other files with common male/female names and TV shows.

So apparently googlemaps.co.uk redirects you to google maps and
attempts a dictionary attack on your Google account. Nice!

Enable 2 factor authentication folks!

-- 
Paul

_______________________________________________
Post Messages to: [email protected]
Subscription Maintenance: https://mail.leafe.com/mailman/listinfo/profox
OT-free version of this list: https://mail.leafe.com/mailman/listinfo/profoxtech
Searchable Archive: https://leafe.com/archives
This message: 
https://leafe.com/archives/byMID/cadwx0+lmcon7h049ryqforog-pb+k+y45oo+07bnnfcqu72...@mail.gmail.com
** All postings, unless explicitly stated otherwise, are the opinions of the 
author, and do not constitute legal or medical advice. This statement is added 
to the messages for those lawyers who are too stupid to see the obvious.

Reply via email to