Re: AOL Instant Messenger

[datatwirl () GIS NET (Oppenheimer, Max)]

napster does the same thing -- whenever you get a file off napster it
displays its full path, or atleast it does on linux versions of napster
 obviously, it does the same thing with windows version, even if it might
not show it)

max
----- Original Message -----
From: Daniel P. Stasinski <daniels () KAREMOR COM>
To: <BUGTRAQ () SECURITYFOCUS COM>
Sent: Monday, May 08, 2000 2:08 PM
Subject: AOL Instant Messenger

> When sending a file to someone using AOL's Instant Messenger
> program, the entire local path of your file is shown to the
> recipient.  Not only is this an invasion of privacy, it also
> opens the door to known security holes in web browsers where
> access can be gained to specific files provided that you know the
> full path to those files, or guessed file names in that same
> path.
>
> AOL has not responded to my direct reports.
>
> Daniel