Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email firstname.lastname@example.org
From: Billy Hoffman (Billy.Hoffmanspidynamics.com)
Date: Fri Sep 29 2006 - 11:45:12 CDT
-HMO's website could check if a visitor has been searching other sites about cancer, cancer treatments, or drug rehab centers.
-Advertising networks could gather information about which topics someone is interested based on their search history and use that to echance their customer databases.
-Government websites could see if a visitor has been searching for bomb-making instructions.
SPI has published a whitepaper about this technique and has also release proof of concept code that will steal search engine queries. Works solid in Firefox, and IE support is a little shaky on multi word queries.
Proof of Concept: http://www.spidynamics.com/spilabs/js-search/index.html
Lead R&D Engineer
SPI Dynamics - http://www.spidynamics.com <http://www.spidynamics.com/>
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/