Google Web Accelerator security issue

Al · Post by Al » Thu May 05, 2005 1:00 pm

Google's got a new piece of software out. It's an HTTP proxy that will cache pages that you might look up then reuse them when other users hit the same page.

The problem is that some forms (including Something Awful's) are reporting that the cached pages include specific user information which means that other users could end up getting logged in on accounts that aren't theirs. This shouldn't happen if you've got pragma set to private (I haven't checked OO but I'm sure Rip or Gedd would know right off the bat) but I thought it was worth a heads up.

Rip · Post by **Rip** » Thu May 05, 2005 2:54 pm

Since everything in between the user and OO is not encrypted, I would not expect anything to be private. If such a thing were to become a concern I would suggest moving to https:

At this point I doubt there is a need.

Rip

LawBeefaroni · Post by **LawBeefaroni** » Thu May 05, 2005 2:56 pm

F'k HTTP proxies. I got highspeed.

Should make for some fun new googlehacking though.