GMail security problem fixed



Google’s not had a great week it would appear (Sony’s had worse… but that’s another story). The Analytics launch was somewhat rocky from most accounts and there is a GMail security bug that’s been announced and fixed. Details on the bug are here, and a writeup is also here.

Apparently a flaw in the authentication method that Google used could allow a user to log in under another account and read messages as well as pose as a legit user.


I’ve looked at the description of the hack, it’s fairly, ummm let’s say involved. It’s not clear to me that an attacker could do this without being at the same machine used to log in on. (say you’re in an internet cafe or library..), Still, Google patched it 4 days after being notified. Didn’t say anything publicly (which is why they released details and subsequently Google has explained that they did patch the vulnerability.)

Some say, there are probably many other sites that are vulnerable to this kind of attack.

Related Posts

Blog Traffic Exchange Related Posts
  • Google Voice Review | I got the golden ticket.... Last Thursday I opened up my GMail and found to my surprise that I had an invite to Google Voice. I didn't have time to deal with it at that time, so I saved it as new until Thursday evening and spent some time then playing with it. I had......
  • Massive Windows Update Tuesday Microsoft had a mammoth patch Tuesday this month with 28 bug fixes (23 critical). (Computerworld article linked above. This is one of the largest update releases in five years (!) Those fixes were wrapped up in 8 updates for Internet Exporer, Office, Sharepoint, Windows media player and visual studio and......
  • Windows XP SP3 Well, in the article the other day about the Windows wireless problem/(feature that could be exploitable?) there was a mention that the default behaviour for Windows would be changed with the next service pack, for XP users that's SP3. So, when can we expec this? It seems that service pack......
Blog Traffic Exchange Related Websites
  • Sunday Money Madness - Happy New Year! Happy New Year Everybody! Let's kick off the first of this year's roundup with a bang! Credit and Debt No Debt Does Not Mean Good Credit says Credit Karma. All Financial Matters posts Bureaus Roll Out New Credit Score Formula for 2009. Finance for a Freelance Life asks Got Gift......
  • New Domain to Google Page Rank 5 in One Month Google said Merry Christmas and Happy New Year to Blog Traffic Exchange with the final toolbar pagerank update of 2008 according to Matt Cutts. This was the first page rank update since launching the domain in late November with this blog. So in one month how much page rank can......
  • Saving Telephone Costs with Gmail I have been an avid user of Google Voice for several months. I have encouraged my family, friends, ¬†and many of my key clients to use my Google Voice number as the best way to reach me anytime, anywhere. My experiences with the Google Voice system have been excellent. Yesterday,......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site