Froogle/Gmail Hack Warning

Vance

New Member
Joined
Apr 3, 2004
Messages
4,265
Reaction score
1
An Israeli hacker has uncovered a flaw in Froogle, Google's price-comparison service, which could allow access to users' Gmail accounts. Nir Goldshlager, who discovered the flaw, warned that URL-embedded Javascript could end up causing personal information to be revealed.

If users execute the script by clicking a link, they would be redireted to a malicious website. From there, hackers can read a user's cookie. It may contain personal information, such as purchase histories, or the username and password used to access Google services - such as Gmail.
Goldshlager warned that even if the user chooses not to save the cookie, the hacker can still discover the username and password for other services such as Google Alerts and Groups because of the way that data is stored.

Source: http://www.neowin.net/
 
Magatsu said:
An Israeli hacker has uncovered a flaw in Froogle, Google's price-comparison service, which could allow access to users' Gmail accounts. Nir Goldshlager, who discovered the flaw, warned that URL-embedded Javascript could end up causing personal information to be revealed.

If users execute the script by clicking a link, they would be redireted to a malicious website. From there, hackers can read a user's cookie. It may contain personal information, such as purchase histories, or the username and password used to access Google services - such as Gmail.
Goldshlager warned that even if the user chooses not to save the cookie, the hacker can still discover the username and password for other services such as Google Alerts and Groups because of the way that data is stored.

Source: http://www.neowin.net/

Thanks for the warning. I contemplated getting a google account, but I guess I won't now.
 
Oceanbreeze said:
Thanks for the warning. I contemplated getting a google account, but I guess I won't now.


It's your loss. Hotmail had so many holes, more so than Google's Gmail. :ugh2:
 
:roll:
Deaf258 said:
It's your loss. Hotmail had so many holes, more so than Google's Gmail. :ugh2:

I don't use my hotmail, either. That's a junk email account that I put on here for safety reasons. Only a select few know what my main email address is.

But, to the point. Google is new, so it doesn't surprise me that it's easily hacked into or might have other problems. I'd prefer to wait until it's been around awhile before I try it. Besides which, I'm happy with what I am using.

Whatever. :roll:
 
Last edited:
Oceanbreeze said:
:roll:

I don't use my hotmail, either. That's a junk email account that I put on here for safety reasons. Only a select few know what my main email address is.

But, to the point. Google is new, so it doesn't surprise me that it's easily hacked into or might have other problems. I'd prefer to wait until it's been around awhile before I try it. Besides which, I'm happy with what I am using.

Whatever. :roll:

No webmail is safe. I am happier with Gmail than having both Yahoo and Hotmail.
 
Back
Top