[nycphp-talk] [OT] Gmail security issue - avoid Froogle for a while?
1j0lkq002 at sneakemail.com
Mon Jan 17 14:48:29 EST 2005
Keith Richardson keithjr-at-gmail.com |nyphp dev/internal group use| wrote:
>hmm link is down... do you have a recap of what it said?
>On Sat, 15 Jan 2005 01:15:01 -0500, inforequest
><1j0lkq002 at sneakemail.com> wrote:
>>Looks like a Froogle link can grab your personal info and access to
>>Google services data...
For clarity, there are reports it has been fixed (unconfirmed byme).
The original report is here (in Hebrew)
A second flaw fixed by google on the same day (but not the same issue)
The slashdot coverage is here:
Since you are reading this via gmail, why doesn't google detect the
context and insert a nice big banner ad that says "Froogle has been
fixed! Gmail is safe! Be Happy!"... since they CAN.
(well, that's what I would do if I worked there)
More information about the talk