Security flaw found in Safari browser

By on July 25, 2010
submit to reddit

Browser’s built-in Autofill exploit can gather information from the address book.

If you are a Safari user, you might perk your ears this way. A serious security bug has been found in Safari that exposes the browser’s built-in Autofill feature to doll out information through a malicious attack. The exploit gathers information from the address book card, specifically first name, last name, work place, city, state, and email address. To read about the technical innards of the attack code, hit up the source link.

Safari users are suggested to disallow Autofill to use info from the address book. This can done through Preferences > Autofill, and uncheck ‘User info from my Address Book card’.

Source: Jeremiah Grossman.


Mufaddal Fakhruddin is the Editor for IGN ME and thinks writing in third person about himself in an about me section is weird.

Most Read
Most Commented
Win two Toshiba AT200 tablets

This festive season Toshiba has 2 tablets to giveaway.

Win an MSI FM2-A85XA-G65 Motherboard

Thanks to MSI we have an great AMD FM2 motherboard to giveaway.

Win a Nokia Asha 311

Thanks to Nokia we have a great entry-level smartphone to giveaway.