Google Desktop Search (GDS) lets users quickly hunt for files and documents stored on their computer using a Web browser. After installation, the program runs in the background -- indexing documents, emails, instant messaging conversations and Web browser history. Dan Wallach at Rice University in Texas, and two students, <A HREF="http://www.newscientist.com/article.ns?id=dn6821">discovered the flaw</A> shortly after the application was released. They developed demonstration code to exploit the flaw and steal search results via a web page.