Hình 10,12 cho thấy một số điện thoại hội nghị dự kiến. Chú ý rằng số điện thoại hội nghị và mã truy cập cũng được liệt kê. Một kẻ tấn công có thể dễ dàng tham gia các hội nghị qua điện thoại tại thời lên kế hoạch và âm thầm nghe trộm các cuộc hội nghị. Sứ mệnh là một kẻ tấn công accomplished | Hacking Google Services Chapter 10 391 Figure reveals several scheduled telephone conferences. Notice that the conference phone number and access code are also listed. An attacker could easily join the telephone conference at the scheduled time and silently eavesdrop on the conference. Mission accomplished. There is a lot attackers can learn from the conversation like corporate secrets technical details about systems in operations etc. Of course we can try variations of the above quires and even space them up with more keywords so we can get a better picture. For example the query username password returns results about people who may stored sensitive login information within their calendar as shown in Figure . Figure Calendar Search for username password This is just the beginning though how about looking for birthdays pet s names etc. As you probably know a lot of password reminder facilities have a secret question. The secrets answer is usually something that we choose from our daily life so there is no chance that we can forget. However the Calendar application may also contain our daily activities. When we mash both we might be able to crack into the targeted user account by simply reading their calendar. There are many different ways the Calendar service can be main and most important security consideration that we as users need to make is whether the information that is enclosed within the Google s shiny event cells is sensitive and can be used to harm us. 392 Chapter 10 Hacking Google Services Blogger and Google s Blog Search Blogger is Google s blogging software hosted at and . Blogger is one of the most widely used blogging platforms. It allows almost instant creations of multiple blogs and has some great features for collaborating with others and preventing comment and trackback spam. When speaking about blogs there are a several points that we need to take into first and most .
