Manage updates with the Download App
Security Bites 110: Breaking Google Gadgets
From gadgets that slide-show pictures of vacations past to calendars that show events in the future, Google Gadgets look cool. But they also have the potential to contain vulnerabilities like anything else within Web 2.0.
By design, Google Gadgets allow scripted code to be uploaded by the end user, creating interesting new attack vectors for those with malicious intent.
CNET's Robert Vamosi talked with Robert Hansen (aka Rsnake), chief executive of SecTheory, and Tom Stracener (aka Strace) of Cenzic. Both will be presenting a talk called "Xploiting Google Gadgets: Gmalware and Beyond" at the annual Black … Read more
%20posts%20on%20CNET&srcUrl=http://howto.cnet.com/8300-5_39-0.html?keyword%3Drobert%2Bhansen%2B(rsnake)&x_breadcrumb=5&x_arw_bkts=MAD:first_impression){kind=small}