Welcome to WebmasterWorld Guest from 54.166.191.159

Forum Moderators: open

Message Too Old, No Replies

Gmail Bug Exposes E-mails to Hackers

     
11:03 pm on Jan 13, 2005 (gmt 0)

WebmasterWorld Senior Member tropical_island is a WebmasterWorld Top Contributor of All Time 10+ Year Member



From Eweek:
[eweek.com...]

By altering the "From" address field of an e-mail sent to the service, hackers could potentially find out a user's personal information, including passwords.

At first glance, to the average user the e-mail would appear normal. But by clicking "show options" within the Gmail interface, the "Reply-To" field will show HTML code that is actually a formatted version of another user's e-mail, HBX wrote on its Web site.

11:37 pm on Jan 13, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Wow it's a serious issue they got!
11:39 pm on Jan 13, 2005 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



It has already been fixed.

[slashdot.org...]

10:57 am on Jan 14, 2005 (gmt 0)

WebmasterWorld Senior Member tropical_island is a WebmasterWorld Top Contributor of All Time 10+ Year Member



Thanks Chndru.
6:47 am on Jan 15, 2005 (gmt 0)

10+ Year Member



Such silly mistakes! and then they claim they're the most trusted service providers online.
11:25 pm on Jan 17, 2005 (gmt 0)

10+ Year Member



Well really these mistakes are pretty easy to make. How many forums are there out there that still have a way of inserting arbitrary HTML? A lot. And XSS expoits are rampant. Fact is humans just do not think of everything.
 

Featured Threads

Hot Threads This Week

Hot Threads This Month