Other nomination
Stealing Pictures with Picasa
A short release note pointing at the Picasa exploit write-up and its source code. Google's Picasa registers the picasa:// URI in the Windows registry, and a cross-site scripting exposure can drive that registered handler to steal a victim's images. Published by McFeters to mark the authors' Black Hat Japan acceptance.
Record
- Researcher
- Nate McFeters
In the archive
Tags
This page is the archive's own catalogue record. The research is the work of Nate McFeters, first published at the original source. Preserved copies are kept so the citation survives its host.