nellie2 Posted January 13, 2005 Report Share Posted January 13, 2005 A Unix community group has reported a flaw in Google's free Gmail email service which it warns could compromise user information.Two members of HBX Networks, going by the monikers 'Hairball' and 'MrYowler', were testing a Perl script that would send out a newsletter. When they tried to reply to the test email the page displayed HTML code which included the names and passwords of other users."We do realise that Gmail is an invitation-only service in a beta-test state of development," said 'Hairball' on the group's website."Nevertheless, many people rely on Gmail heavily, and many more people are forced to communicate with Gmail users because of this reliance."These people should expect their communications to be vulnerable to interception, at least until Gmail corrects the issue."The problem appears to come from poorly defined code boundaries on Google's mail server.The community group members do not propose a workaround beyond informing Google of the problem, but do include a request for a job with the company at the end of their report.source Quote Link to comment Share on other sites More sharing options...
trackrat Posted January 13, 2005 Report Share Posted January 13, 2005 I decided to give G-Mail a try, I think I will leave it alone until they fix the vulnerability. Quote Link to comment Share on other sites More sharing options...
andsome Posted January 13, 2005 Report Share Posted January 13, 2005 I'm sticking with OE with all it's warts. Quote Link to comment Share on other sites More sharing options...
Chris Posted January 16, 2005 Report Share Posted January 16, 2005 Once again.BETA. Quote Link to comment Share on other sites More sharing options...
scuzzman Posted January 17, 2005 Report Share Posted January 17, 2005 The flaw has since been fixed, and it was done in less than 1 day after this report was out. Quote Link to comment Share on other sites More sharing options...
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.