Google is looking to take over ISP's email operations for a fee:
Google targets ISPs: is there a dark side?
All your ISP email belong to Google: but will it be good for all
humankind? Pretty much every Internet service provider on the planet
offers email as part of their package, but that doesn't mean they do a
particularly good job of it .... Search giant Google is hoping to change
that attitude with the latest expansion to its Google Apps software
platform, designed specifically to attract ISPs and other Internet
businesses.
URL:
http://apcmag.com/6138/the_dark_side_of_google_apps_for_isps
... At the same time security and privacy issues with search engines
become the "low hanging fruit" for cybercriminals:
‘Month of bugs’ spotlight hits search engines
A Ukranian hacker known as “MustLive” has announced plans for a Month of
Search Engine Bugs project in June 2007.\
[The] purpose of this Month of Bugs is a demonstration of real state
with security in search engines, which are the most popular sites in
Internet. To let users of search engines and web community as a whole to
understand all risks, which search engines bring to them. And also to
draw attention of search engines’ owners to security issues of their sites.
The plan is to shake out cross-site scripting bugs in the most popular
search engines (think Google, Yahoo, MSN, Ask.com) and publish details
on these flaws.
Cross-site scripting vulnerabilities are widely considered the low
hanging fruit in security research circles (see this list for some
examples) but, when combined with other unpatched holes, they can be
valuable to an attacker (see RSnake’s description of scenario that
blends cross-site-scripting bugs into a targeted attack).
URL:
http://blogs.zdnet.com/security/?p=211
--
David Solomonoff, President
Internet Society of New York
[EMAIL PROTECTED]
isoc-ny.org
_______________________________________________
Discuss mailing list
[email protected]
http://lists.isoc-ny.org/mailman/listinfo/discuss