Comments on: AutoComplete May Equal AutoCompromise http://www.tonybradley.com/2007/09/autocomplete-may-equal-autocompromise/ Computer Security In Plain English For Normal People Wed, 03 Mar 2010 17:29:50 -0600 http://wordpress.org/?v=2.8.4 hourly 1 By: Securasys http://www.tonybradley.com/2007/09/autocomplete-may-equal-autocompromise/comment-page-1/#comment-11 Securasys Fri, 28 Sep 2007 03:20:51 +0000 http://tonybradley.com/?p=21#comment-11 Hey Tony - I was reading this post and this article is right on the money. I've always felt this option was a really bad design and left the door wide open for the problems you mentioned. A good friend of mine was unfortunate enough to have her house burglarized and among the things taken were her laptop computer. She had configured her personal investment sites, banking sites, email with this really convenient AutoComplete option. Needless to say when she started to alert her bank, etc - they reported activity on her accounts as early as the same day of the theft! She was able to nip the problem in the bud and her finances were not affected, but she is now a potential candidate to identity theft as social security #s, birthdates, etc were all recorded in personal planner software on the PC - a horrific situation. This probably calls for hard disk encryption - but thats another article.. :-) Jesse www.securasys.net PCI Compliance, Application Security Reviews, Ethical Hacking, Physical Security Site Reviews Hey Tony – I was reading this post and this article is right on the money. I’ve always felt this option was a really bad design and left the door wide open for the problems you mentioned.

A good friend of mine was unfortunate enough to have her house burglarized and among the things taken were her laptop computer. She had configured her personal investment sites, banking sites, email with this really convenient AutoComplete option.

Needless to say when she started to alert her bank, etc – they reported activity on her accounts as early as the same day of the theft! She was able to nip the problem in the bud and her finances were not affected, but she is now a potential candidate to identity theft as social security #s, birthdates, etc were all recorded in personal planner software on the PC – a horrific situation.

This probably calls for hard disk encryption – but thats another article.. :-)

Jesse
http://www.securasys.net
PCI Compliance, Application Security Reviews, Ethical Hacking, Physical Security Site Reviews

]]>