Sunday 12 June 2011

Bank information in Google's cache

In Australia, the seller of a store has discovered a security bug in
the search engine Google. The vulnerability in question allows to
reveal bank information passing through a payment gateway.

The information was laid bare via Google's cache. Besides the number
of credit cards can be accessed at its expiry date and the name and
address of the owner. In all 000 are 22 cards that have been
identified (Visa, Mastercard, American Express, Solo, Switch, Delta
and Maestro / Cirrus), most of which belong to customers in the U.S.
and British or Australian.

"I received a notification Google for an article," says the employee
who discovered the problem, then adds: "After having visited the page
I found myself in a virtual directory with many files. It seems that
the site was a payment gateway managing the financial transactions of
various online shops."

This is not the first time Google is accused in a case of safety.
Indeed, in May 2007, it was revealed that a small script to search
credit cards directly within the engine.

An investigation was opened by the police.

No comments:

Post a Comment