<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Security holes in Google Desktop Search fixed</title>
	<atom:link href="http://www.squarefree.com/2005/07/17/security-holes-in-google-desktop-search/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.squarefree.com/2005/07/17/security-holes-in-google-desktop-search/</link>
	<description>Jesse Ruderman on Firefox, security, and more</description>
	<pubDate>Tue, 06 Jan 2009 21:15:05 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.5</generator>
		<item>
		<title>By: Jesse Ruderman</title>
		<link>http://www.squarefree.com/2005/07/17/security-holes-in-google-desktop-search/#comment-1473</link>
		<dc:creator>Jesse Ruderman</dc:creator>
		<pubDate>Mon, 25 Jul 2005 10:25:57 +0000</pubDate>
		<guid isPermaLink="false">http://www.squarefree.com/2005/05/05/security-holes-in-google-desktop-search/#comment-1473</guid>
		<description>It hasn't been fixed, but David Baron has been working on it on and off.  See https://bugzilla.mozilla.org/show_bug.cgi?id=147777.</description>
		<content:encoded><![CDATA[<p>It hasn&#8217;t been fixed, but David Baron has been working on it on and off.  See <a href="https://bugzilla.mozilla.org/show_bug.cgi?id=147777" rel="nofollow">https://bugzilla.mozilla.org/show_bug.cgi?id=147777</a>.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Felipe Gomes</title>
		<link>http://www.squarefree.com/2005/07/17/security-holes-in-google-desktop-search/#comment-1469</link>
		<dc:creator>Felipe Gomes</dc:creator>
		<pubDate>Mon, 25 Jul 2005 06:53:11 +0000</pubDate>
		<guid isPermaLink="false">http://www.squarefree.com/2005/05/05/security-holes-in-google-desktop-search/#comment-1469</guid>
		<description>Jesse. what was the solution for bug 57351? It seems like a hard problem to solve..</description>
		<content:encoded><![CDATA[<p>Jesse. what was the solution for bug 57351? It seems like a hard problem to solve..</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Adam</title>
		<link>http://www.squarefree.com/2005/07/17/security-holes-in-google-desktop-search/#comment-1467</link>
		<dc:creator>Adam</dc:creator>
		<pubDate>Mon, 25 Jul 2005 01:48:32 +0000</pubDate>
		<guid isPermaLink="false">http://www.squarefree.com/2005/05/05/security-holes-in-google-desktop-search/#comment-1467</guid>
		<description>You don't need a hosts file like that if you have Adblock</description>
		<content:encoded><![CDATA[<p>You don&#8217;t need a hosts file like that if you have Adblock</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: David 'Zanchey' Adam</title>
		<link>http://www.squarefree.com/2005/07/17/security-holes-in-google-desktop-search/#comment-1456</link>
		<dc:creator>David 'Zanchey' Adam</dc:creator>
		<pubDate>Mon, 18 Jul 2005 13:39:55 +0000</pubDate>
		<guid isPermaLink="false">http://www.squarefree.com/2005/05/05/security-holes-in-google-desktop-search/#comment-1456</guid>
		<description>Jesse -

"Firefox, Windows XP, the Windows XP firewall, or my ISP could prevent "external" DNS names from resolving to "internal" IP addresses.like 127.0.0.1."

If Firefox and Windows XP did this (and possibly the firewall), you'd break those wonderful hosts files filled with ad-server to 127.0.0.1 mappings (misguided though they might be).

I think the first suggestion, GDS rejecting requests that don't have a host header of localhost or 127.0.0.1, is the better one.</description>
		<content:encoded><![CDATA[<p>Jesse -</p>
<p>&#8220;Firefox, Windows XP, the Windows XP firewall, or my ISP could prevent &#8220;external&#8221; DNS names from resolving to &#8220;internal&#8221; IP addresses.like 127.0.0.1.&#8221;</p>
<p>If Firefox and Windows XP did this (and possibly the firewall), you&#8217;d break those wonderful hosts files filled with ad-server to 127.0.0.1 mappings (misguided though they might be).</p>
<p>I think the first suggestion, GDS rejecting requests that don&#8217;t have a host header of localhost or 127.0.0.1, is the better one.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Larry Page</title>
		<link>http://www.squarefree.com/2005/07/17/security-holes-in-google-desktop-search/#comment-1455</link>
		<dc:creator>Larry Page</dc:creator>
		<pubDate>Mon, 18 Jul 2005 10:53:45 +0000</pubDate>
		<guid isPermaLink="false">http://www.squarefree.com/2005/05/05/security-holes-in-google-desktop-search/#comment-1455</guid>
		<description>Just what was the objective behind this post? So you could claim some credit?

Happy Ego Trip!</description>
		<content:encoded><![CDATA[<p>Just what was the objective behind this post? So you could claim some credit?</p>
<p>Happy Ego Trip!</p>
]]></content:encoded>
	</item>
</channel>
</rss>
