AOL Instant Messenger

[daniels () KAREMOR COM (Daniel P. Stasinski)]

When sending a file to someone using AOL's Instant Messenger
program, the entire local path of your file is shown to the
recipient.  Not only is this an invasion of privacy, it also
opens the door to known security holes in web browsers where
access can be gained to specific files provided that you know the
full path to those files, or guessed file names in that same
path.

AOL has not responded to my direct reports.

Daniel