Is Snowden a Russian citizen? No, it’s just a Google Translate trick - randolphfrund1996

The proclamation appeared in small textbook on the Russian prexy's website: "Let me speak from my core: Edward Snowden is a Russian Citizen. Thanks to @homakov!"

The Twitter handle belongs to Egor Homakov, a security researcher with a incursion examination group called Sakurity, which does freelance consulting.

Homakov's spoof substance didn't actually appear on Vladimir Putin's website. Alternatively, Homakov found a trick that allowed him to modify content delivered to a user from Google Translate, which he describes on his web log.

Interestingly, Homakov and Google agree that his finding isn't actually a security event as such. "Equally the research worker implied at the end of his original blog post, this is truly not a security exposure," according to a statement from a Google spokeswoman.

Instead, Homakov uses JavaScript to manipulate the way Google serves translated content from an original, untranslated page.

When Google translates something, IT returns the content in a hosted, separate sandboxed domain: "translate.googleusercontent.com." It allows third-party scripts to run therein region, which would allow, for instance, Homakov to modify the content.

Google, which rewards security researchers for determination certain kinds of software flaws, advises that IT doesn't pay for cross-site scripting vulnerabilities in the ".googleusercontent.com" domain.

The company said it maintains a number of domains that use the same-origin insurance policy, a complicated set of conditions intended to allow for interactions between sites in the same domain but prevent meddling from other sources.

In the case of ".googleusercontent.com," Google says that "unless an impact on touchy user data can represent incontestable, we do not deliberate the ability to execute JavaScript therein region to be a microbe."

Still, Homakov's trick is amusing, no less because Snowden, a previous NSA declarer who has discharged batches of reactive material documenting U.S. government surveillance efforts, is still marooned in Russia while atomic number 2 tries to secure mental hospital.

Homakov's experiment also proves that users may want to be cautious when using Google Translate: If the satisfied is nearly unbelievable, it might be best to find a native speaker system to affirm the interlingual rendition.

Source: https://www.pcworld.com/article/453120/is-snowden-a-russian-citizen-no-its-just-a-google-translate-trick.html

Posted by: randolphfrund1996.blogspot.com