Onderwerp: Anonymous Surfing Via Gmail Login Window - Poor Sanitization

Anonymous Surfing Via Gmail Login Window - Poor
Sanitization

User can do anonymous surfing (apart form other cool
tricks) from Gmail login window. The window is small,
still checking your mails via google is phun.
1. Open
https://gmail.google.com/?dest=http%3A%2F%2Fblablabla.
2. The login window will display an error page.
3. Click on it.
4. Now user is directed to google.com
5. Rest you can log in anonymously via google search
engine. You can browse this window using Arrow Keys.

Regards
Punjabi MC

----

Je kade na Ranjah kan padvonda,
je Heer khavandi churi na.
Mirze ne fer marna ki si,
je hundi majboori na.



_______________________________
Do you Yahoo!?
Win 1 of 4,000 free domain names from Yahoo! Enter now.
http://promotions.yahoo.com/goldrush

Am Mittwoch, 25. August 2004 15.14 schrieb Punabi MC:
> Anonymous Surfing Via Gmail Login Window - Poor
> Sanitization
>
> User can do anonymous surfing (apart form other cool
> tricks) from Gmail login window. The window is small,
> still checking your mails via google is phun.

No way this is anonymous. The webserver still logs your IP, Referrer, Brows=
er,=20
etc... just see the two following lines from my access_log:
80.218.86.137 - - [26/Aug/2004:17:24:43 +0000] "GET / HTTP/1.1" 200 5221=20
"http://www.google.ch/search?hl=3Dde&ie=3DUTF-8&q=3Dmaol.ch&btnG=3DGoogle-S=
uche&m
eta=3D" "Mozilla/5.0 (X11; U; Linux x86_64; en-US; rv:1.6) Gecko/20040114" =
=20
80.218.86.137 - - [26/Aug/2004:17:24:43 +0000] "GET /onebox.css HTTP/1.1" 2=
00=20
2303 "http://www.maol.ch/" "Mozilla/5.0 (X11; U; Linux x86_64; en-US
; rv:1.6) Gecko/20040114"

Markus Ackermann.

PS: the trick requires a GMail authorized browser:=20
https://gmail.google.com/gmail/brows...uirements.html
=2D-=20
Symlink - News f=FCr die Welt http://symlink.ch/
maol symbolisch http://maol.ch/