GMail security problem fixed



Google’s not had a great week it would appear (Sony’s had worse… but that’s another story). The Analytics launch was somewhat rocky from most accounts and there is a GMail security bug that’s been announced and fixed. Details on the bug are here, and a writeup is also here.

Apparently a flaw in the authentication method that Google used could allow a user to log in under another account and read messages as well as pose as a legit user.


I’ve looked at the description of the hack, it’s fairly, ummm let’s say involved. It’s not clear to me that an attacker could do this without being at the same machine used to log in on. (say you’re in an internet cafe or library..), Still, Google patched it 4 days after being notified. Didn’t say anything publicly (which is why they released details and subsequently Google has explained that they did patch the vulnerability.)

Some say, there are probably many other sites that are vulnerable to this kind of attack.

Related Posts

Blog Traffic Exchange Related Posts
  • I've NEVER liked UPNP.... now I have another reason.... I remember the first Windows XP vulnerability was a Upnp vulnerability. I have made one of my first visits on any new XP system a visit to grc.com to disable it on an XP workstation. But, it's the great thing - makes life so much easier for setting up network......
  • How to Remove Personal Security | Personal Security Removal Guide Personal Security is a rogue antivirus application that comes from the same (dreaded) family as the Cyber Security rogue. It usually installs on the users computer without the permission of the computer user. Once installed on the system it will then perform supposed scans finding lots of virus infected files......
  • Google Voice Review | I got the golden ticket.... Last Thursday I opened up my GMail and found to my surprise that I had an invite to Google Voice. I didn't have time to deal with it at that time, so I saved it as new until Thursday evening and spent some time then playing with it. I had......
Blog Traffic Exchange Related Websites
  • Gmail for BES? Goolge App connector targets Gmail for the Enterprise eWeek is reporting that Google is releasing software for BES (Blackberry Enterprise Server) that will allow GMail to be routed to blackberry devices.  The software is in beta now, but will be available to users of Google Apps Premier when it is fully released in July.  Right now, the application......
  • 7 Ways To Use Google Buzz Effectively Did you know about the hot cake in town? I bet you already. Yes, you are right! It's Google Buzz  which is creating quite a stir among social media enthusiastics, bloggers, celebrities, friends, geeks, nerds, carrots and beans. It's only about a week since the launch of Google Buzz, but......
  • webOS 1.4.5 Now Available For Sprint Palm Pre and Palm Pixi Users Last week, Palm finally released the webOS 1.4.5 update for the Sprint Palm Pre and Palm Pixi. While the latest OS upgrade is available in Europe since last month, there's still no news as to when Palm plans to release the webOS 1.4.5 update for Verizon and AT&T customers. If you......
PDF24    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site