GMail vulnerability on Atom feed?



I don’t know about this, and will be curious to see what the answer is…. barrapunto.com had the link to a post from a Gmail user who notes… Gmail has the capability to have a feed of your new messages in Atom format. (We’re talking rss feeds here.) That’s all well and good. He went to bloglines though and tried to setup viewing of his feed…. and saw tons of email – NOT HIS.


… and also not that of ANYONE that had previously used his PC.

It looks as though Google uses the same URL for someone to access it’s feed. https://gmail.google.com/gmail/feed/atom

You do have to enter a username and password, but cookies are used to cache that information. For this reason he didn’t expect it to work through an online page like bloglines, but it seems it probably had cached either one of two things…. 1) SOMEONE elses login information and when he signed up for the feed it showed him another persons inbox. or 2) it simply cached the feed after the first user checked their mail.

If it’s the first case, it’s possibly a Google security bug. If it’s the 2nd, then it’s something bloglines needs to handle (caching of feeds across accounts – some feeds shouldn’t be cached.)

Related Posts

Blog Traffic Exchange Related Posts
  • Google Trends Hottrends (Hot Trends) truncated to 40? Interesting - it looks as though Google may be limiting the number of results in their hottrends search page to just 40 now from the 100 that they used to. I'm not very surprised really.... in the last few weeks I've been using the hottrends to see which rogue antivirus......
  • Google now officially giving news feeds For some time the only way to get an RSS feed of google news was through third party scrapers. Well, according to The Google Blog. Now there are two flavors of OFFICIAL news feed from Google. The page to get information on the feeds available is here. It looks as......
  • Funny - list of reasons it doesn't pay to be "the computer guy"... I found this not too long ago at a techamok forum... copied here for convenience - not intended to slight the original author.... I only met my brother’s ex-girlfriend’s family once — the year they invited our family over to share Thanksgiving dinner. Since we were basically a group of......
Blog Traffic Exchange Related Websites
  • How to Setup Gmail as Your Email Manager for Multiple Email Accounts Image via Wikipedia If you have a gmail account and countless other multiple email accounts and you want your gmail account to be the primary email manager to all of your email accounts you can certainly do so. One way is by setting up each and every email account to......
  • 7 Ways to Help Get Your Security Deposit Back Moving is usually stressful, but you can help yourself a little by making sure you get your security deposit back. There are a number f things you can do to help leave your rental in tip top shape and ensure that you have that 'extra; money coming your way. Thoroughly......
  • Remember To Vary The Food When Feeding A fish only aquarium or reef aquarium offers several pleasures. One of them is obvious, and that is just sitting and admiring. After a while, all seems at peace in the world. Maybe that’s why some doctors and dentists have aquariums in their surgeries. Another very pleasurable experience for the......
www.pdf24.org    Send article as PDF   

Similar Posts


See what happened this day in history from either BBC Wikipedia
Search:
Keywords:
Amazon Logo

Comments are closed.


Switch to our mobile site