Image
 
linkedin_logo.png rss_logo.jpg
twitter_logo.png youtube_logo.jpg
Latest Additions
 
EH-Net Login
Welcome Guest.






Lost Password?
No account yet? Register
Who's Online
We have 53 guests and 1 member online
 
Advertisement

You are here: Home arrow Ethical Hacking Discussions and Related Certificationsarrow Otherarrow Security of Xobni
EH-Net
May 21, 2013, 01:22:21 PM *
Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
News: Go back to The Ethical Hacker Network Online Magazine Home Page
 
   Home   Help Calendar Login Register  
Pages: [1]   Go Down
  Print  
Author Topic: Security of Xobni  (Read 6617 times)
0 Members and 1 Guest are viewing this topic.
doodleface
Newbie
*
Offline Offline

Posts: 34



View Profile WWW
« on: February 11, 2009, 09:13:06 AM »

I am curious what is everyone’s opinion of the Outlook tool called Xobni from a security standpoint. Does this application create more vectors for attack on the machine that are significant enough to not justify the increased productivity gained from its indexing and search capabilities?

I understand that the application also calls out to facebook, hoover, and linkedin every time you go to a new email, but if you simply disable that feature, is that enough to consider this application OK to use without worry of lose of information or increased attack vectors?

Thank you for your input.
Logged

CISSP, OSCP, C|EH, E|CSA, C|HFI, GXPN, GWAPT, GCIH, GISP, GSEC, MCITP:EA, CCNA, FCT, FCNSP, JNCIA, JNCIA-FWV, MCSE Security, A+, Net+, Server+, Security+
doodleface
Newbie
*
Offline Offline

Posts: 34



View Profile WWW
« Reply #1 on: February 12, 2009, 10:53:37 AM »

I completed further investigations to find out if I needed to be concerned about Xobni possibly hemorrhaging sensitive information. This what I found and my analysis. The capture that was done, was with almost all services shut off and the capture was done over a 5 minute period where I just opened Outlook and let Xobni do its thing and see if it did any interesting call outs to the net. I am sure more interesting things happened over a long period of time, but I only have so much time to analyze traffic.


The first call out, based on what I can tell is a check for updates either for the software or the ads in the software



Next it contacted Xobni.com again, using an ID that can track me and it is looking for new messages" not sure what it is doing there"



Next it completed a call back to Xobni.com asking for if I still have invites left to give to friends and if I do, post Ad about it below.




Now granted I am making some assumptions here and I am basing this off of the Stream in my analysis in my observation, but the simple fact that I am being ID'd and can be tracked is dis concerning to me. Unless I know exactly what they are using the ID for and the potential encrypted messages in the stream, that right there is enough to have me stop using Xobni despite its productivity increase.

Let me know your thoughts
« Last Edit: February 12, 2009, 11:07:51 AM by doodleface » Logged

CISSP, OSCP, C|EH, E|CSA, C|HFI, GXPN, GWAPT, GCIH, GISP, GSEC, MCITP:EA, CCNA, FCT, FCNSP, JNCIA, JNCIA-FWV, MCSE Security, A+, Net+, Server+, Security+
Pages: [1]   Go Up
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.18 | SMF © 2013, Simple Machines
Joomla Bridge by JoomlaHacks.com
Valid XHTML 1.0! Valid CSS!
Page created in 0.057 seconds with 23 queries.
 
Exclusive Deal

sansfire13_245x90_cw90.jpg
SANSFIRE 2013
June 15 - 22

5% Off w/ Code: EHN_5

SANS Deals 4 EH-Netters
5% OFF Any SANS Course in Any Format!
Coupon Code: EHN_5 Including SANS Rocky Mountain 2013 & SANS Boston 2013
Polls
Compared to this year, 2013 will be:
 
Recent Forum Topics
EH-Net News Feeds
Latest Additions
 
         
Advertisement

© 2013 The Ethical Hacker Network
Joomla! is Free Software released under the GNU/GPL License.