Second Google Desktop attack reported

Google's PC search software is vulnerable to a variation on a little-known Web-based attack called anti-DNS pinning that could give an attacker access to any data indexed by Google Desktop. This is the second security problem reported for the software.

According to Robert Hansen, the independent security researcher who first reported the attack, "All of the data on a Google desktop can now be siphoned off to an attacker's machine." Hansen, who is CEO of Sectheory.com, did not post proof of concept code for his attack, but he said that he has "tested every component of it, and it works." He has posted some details of how Google Desktop data could be compromised on his blog.

Read the article HERE.