Safari's AutoFill feature can reveal your personal info, says security expert

Filed under: Security, Apple, Browsers

Apple's Safari browser has a major security hole that malicious sites can use to steal your personal data, including your address and phone number. If you have any of the "AutoFill web forms" boxes checked, a site can snag information from your Address Book entry without your knowledge. To turn that feature off, open up preferences and click AutoFill.

Most people don't put things like credit cards numbers or Social Security numbers in their Address Book entries -- why would you? -- but your name, address and phone number are probably still there from the first time you registered your computer with Apple. Windows Safari users aren't entirely exempt from this exploit, either. Even though there's no Address Book on Windows, any personal info you put directly into Safari's AutoFill is still at risk.

Yikes, Apple! I expect to see a security update for Safari in the coming days. Until then, I'll use a more secure browser, like ... well, anything except Firefox, according to one firm.

[via TUAW]

Safari's AutoFill feature can reveal your personal info, says security expert originally appeared on Download Squad on Thu, 22 Jul 2010 14:15:00 EST. Please see our terms for use of feeds.

Read | Permalink | Email this | Comments