Ask.com Leaves Server Logs Public, Leaks All Your Searches

MWT Bot

Robot
Content Creator
Verified
Joined
Apr 21, 2016
Messages
1,337
OS
Linux
Antivirus
Isolation
#1


Ask.com's Apache server status page is open to the public, and everyone can see what people are searching for. Any queries and user actions done on that particular server on Ask.com are open to anyone who wants to have a look.

The discovery was made by researcher Paul Shapiro earlier today, and even though it's been a couple of hours since the revelation was made, Ask.com has not hidden its server from people's eyes.

It's unclear for how long this page has been open to the public and given Ask.com's inaction, for how long it's going to be left like this. The server status page was restarted over three days ago, and the running theory is that during that reboot the server page was accidentally left exposed.

There are also details regarding the total accesses since the server reset - 4.4 million, the total traffic - 237.9 GB, and so on.



Not a security threat

Thankfu... (read more)

Read more: Ask.com Leaves Server Logs Public, Leaks All Your Searches
 
Last edited by a moderator: