I know your name, where you work, and live (Safari v4 & v5)
jeremiahgrossman.blogspot.com
I know your name, where you work, and live (Safari v4 & v5)
1–10 of 61 posts
Re: I know your name, where you work, and live (Safari v4 & v5)
#2(Title sic).
Short summary: Safari autocompletes forms from your private address book, and can be tricked into doing that by Javascript events on form fields named in ways Safari would want to autocomplete; worse, once autocompleted, that data can be read out of the form by the same JS that triggered the event.
Long story short, if you browse to a site with Safari and you have autocomplete on, that site can slurp some stuff out of your address book.
Re: I know your name, where you work, and live (Safari v4 & v5)
#3What do other browsers do differently to prevent this from being a problem?
Re: I know your name, where you work, and live (Safari v4 & v5)
#4What do other browsers do differently to prevent this from being a problem?
They do not use your system's address book to fill forms online.
Re: I know your name, where you work, and live (Safari v4 & v5)
#5It occurs to me that the reason it doesn't work for saved information that begins with a digit is probably to protect CC numbers / CVVs from a similar attack.
Re: I know your name, where you work, and live (Safari v4 & v5)
#6Re: I know your name, where you work, and live (Safari v4 & v5)
#7Re: I know your name, where you work, and live (Safari v4 & v5)
#8www.didtrade.com" rel="nofollow">http://www.didtrade.com/>www.didtrade.co... Online sell fashion goods,Accept PayPal.cheap replica fashion goods for sale from china free shipping
handbaghttp://www.didtrade.com/>handbag />
Replica" rel="nofollow">http://www.didtrade.com/>Replica t-shirts free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica Children-coat free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica Children-pants free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica Children-tops free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica Children shoes free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica children-boot free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica UGG boots free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica Edhardy boots free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica LV boots free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica DG boots free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica Gucci boots free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica chanel boots free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica fendi boots free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica Tou`s boots free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica Versace boots free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica coach boots free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica juicy boots free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica Burberry boots
Replica" rel="nofollow">http://www.didtrade.com/>Replica Justin boots
Replica" rel="nofollow">http://www.didtrade.com/>Replica Dior boots free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica Puma boots free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica DB bag free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica Burberry bag free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica Suitcase free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica gucci bag free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica Fendi bag free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica Versace bag free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica Prada bag free shipping
Replica" rel="nofollow">http://www.didtrade.com/>Replica Hermes_7*star free shipping
Re: I know your name, where you work, and live (Safari v4 & v5)
#9Re: I know your name, where you work, and live (Safari v4 & v5)
#10Earlier quoted context omitted.
They do not use your system's address book to fill forms online.
Doesn't firefox autofill forms? I didn't realize that was a safari only feature.
Autocomplete by other browsers works by remembering things you entered in forms previously (maybe restricted to domain?). One distinction is that you already decided you wanted to expose that information.
The most important distinction though, is that you have to still select to fill that out manually.
Of course logins are another story - those are automatically filled in. But those are restricted to the page you already entered them on, and you have to decide you want that information filled explicitly.