Gmail exploit, allows website to get your contact list.

[outrun]

the exploit takes advantage of the fact that Google puts your details into a JS file. As a result, if you're logged into Gmail and browsing the web, any rogue website can declare the function "google" and then parse all your contacts.

[engadget.com...]

Best thing to do for now is to log out of google services and clear your cache, until the problem is fixed.

[Span]

It seems they fixed it: [blogs.zdnet.com ]

[outrun]

There is a website that actually shows you,your contact list, After logging in and out, I tried it and it still shows all my contacts its not showing my email address but its showing my entire contact list.

<edit>
The website:
[googlified.com.googlepages.com...]
</edit>

[Span]

Not fixed indeed. Interesting. It shows the gmail address of a relative (not mine) and my contactlist..