AllDeaf.com
 
 
 
Our Sponsors

Go Back   AllDeaf.com > Deaf Community > Current Events

  

Reply
 
LinkBack Thread Tools Display Modes
Old 01-14-2005, 03:44 PM   #1 (permalink)
Registered User
 
Join Date: Apr 2004
Posts: 4,280
Froogle/Gmail Hack Warning

An Israeli hacker has uncovered a flaw in Froogle, Google's price-comparison service, which could allow access to users' Gmail accounts. Nir Goldshlager, who discovered the flaw, warned that URL-embedded Javascript could end up causing personal information to be revealed.

If users execute the script by clicking a link, they would be redireted to a malicious website. From there, hackers can read a user's cookie. It may contain personal information, such as purchase histories, or the username and password used to access Google services - such as Gmail.
Goldshlager warned that even if the user chooses not to save the cookie, the hacker can still discover the username and password for other services such as Google Alerts and Groups because of the way that data is stored.

Source: http://www.neowin.net/
Vance is offline   Reply With Quote
Alt Today
Deafness

Beitrag Sponsored Links

__________________
This advertising will not be shown in this way to registered members.
Register your free account today and become a member on AllDeaf.com
   
Old 01-14-2005, 03:51 PM   #2 (permalink)
Deaf258
Guest
 
Posts: n/a
I wonder if Google is aware of this?
  Reply With Quote
Old 01-14-2005, 04:06 PM   #3 (permalink)
Registered User
 
Join Date: Apr 2004
Posts: 4,280
With Neowin, I am sure google already know about this.
Vance is offline   Reply With Quote
Old 01-14-2005, 04:13 PM   #4 (permalink)
I'm back :)
 
Oceanbreeze's Avatar
 
Join Date: Mar 2004
Location: S. FL
Posts: 5,759
Send a message via AIM to Oceanbreeze Send a message via MSN to Oceanbreeze Send a message via Yahoo to Oceanbreeze
Quote:
Originally Posted by Magatsu
An Israeli hacker has uncovered a flaw in Froogle, Google's price-comparison service, which could allow access to users' Gmail accounts. Nir Goldshlager, who discovered the flaw, warned that URL-embedded Javascript could end up causing personal information to be revealed.

If users execute the script by clicking a link, they would be redireted to a malicious website. From there, hackers can read a user's cookie. It may contain personal information, such as purchase histories, or the username and password used to access Google services - such as Gmail.
Goldshlager warned that even if the user chooses not to save the cookie, the hacker can still discover the username and password for other services such as Google Alerts and Groups because of the way that data is stored.

Source: http://www.neowin.net/
Thanks for the warning. I contemplated getting a google account, but I guess I won't now.
__________________

In Memoriam
1966 - 2007
Oceanbreeze is offline   Reply With Quote
Old 01-15-2005, 12:25 AM   #5 (permalink)
Deaf258
Guest
 
Posts: n/a
Quote:
Originally Posted by Oceanbreeze
Thanks for the warning. I contemplated getting a google account, but I guess I won't now.

It's your loss. Hotmail had so many holes, more so than Google's Gmail.
  Reply With Quote
Old 01-15-2005, 01:54 PM   #6 (permalink)
I'm back :)
 
Oceanbreeze's Avatar
 
Join Date: Mar 2004
Location: S. FL
Posts: 5,759
Send a message via AIM to Oceanbreeze Send a message via MSN to Oceanbreeze Send a message via Yahoo to Oceanbreeze
Quote:
Originally Posted by Deaf258
It's your loss. Hotmail had so many holes, more so than Google's Gmail.
I don't use my hotmail, either. That's a junk email account that I put on here for safety reasons. Only a select few know what my main email address is.

But, to the point. Google is new, so it doesn't surprise me that it's easily hacked into or might have other problems. I'd prefer to wait until it's been around awhile before I try it. Besides which, I'm happy with what I am using.

Whatever.
__________________

In Memoriam
1966 - 2007

Last edited by Oceanbreeze; 01-15-2005 at 01:57 PM.
Oceanbreeze is offline   Reply With Quote
Old 01-15-2005, 02:45 PM   #7 (permalink)
Deaf258
Guest
 
Posts: n/a
Quote:
Originally Posted by Oceanbreeze


I don't use my hotmail, either. That's a junk email account that I put on here for safety reasons. Only a select few know what my main email address is.

But, to the point. Google is new, so it doesn't surprise me that it's easily hacked into or might have other problems. I'd prefer to wait until it's been around awhile before I try it. Besides which, I'm happy with what I am using.

Whatever.
No webmail is safe. I am happier with Gmail than having both Yahoo and Hotmail.
  Reply With Quote
Old 01-15-2005, 02:50 PM   #8 (permalink)
I'm back :)
 
Oceanbreeze's Avatar
 
Join Date: Mar 2004
Location: S. FL
Posts: 5,759
Send a message via AIM to Oceanbreeze Send a message via MSN to Oceanbreeze Send a message via Yahoo to Oceanbreeze
To each his own.
__________________

In Memoriam
1966 - 2007
Oceanbreeze is offline   Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -5. The time now is 03:02 AM.


Join AllDeaf on Facebook!

All text, images, and other content are Copyright © 2002-2008 by AllDeaf.com. All Rights Reserved.
vBulletin® Version 3.7.1
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.