Got Gmail? Perhaps you are already hacked!

Colin Dunstan · 10-29-2004, 04:06 PM

Google's Gmail is vulnerable to a security exploit that might allow hackers full access to your email account simply by knowing your username, according to Nana Netlife Magazine:

"Everything could get publicly exposed – your received mails might be readable, as well as all of your sent mail, and furthermore – anyone could send and receive mail under your name", thus reveals Nir Goldshlagger, an Israeli hacker, on an exclusive interview with Nana NetLife Magazine. "Even more alarming", he explains, "is the fact that the hack itself is quite simple. All that is needed of the malicious hacker, beside knowledge of the specific technique, is quite basic computer knowledge, the victim's username – and that’s it, he's inside".

Google admitted to the security flaw and is working on a fix.

One tip for Google: Stay beta forever, then you don't have to bother with legal claims at the end.

Alexander Turcic · 10-30-2004, 05:17 PM

Google has fixed the flaw:

"Google was recently alerted to a potential security vulnerability affecting the Gmail service. We have since fixed this vulnerability, and all current and future Gmail users are protected," Google spokesman Nathan Tyler said.

An investigation by Google found that only a handful of Gmail users were victimized, the source close to the Mountain View, California-based company said.

Now I wonder how would they be able to investigate who exactly was victimized?

cbarnett · 10-31-2004, 06:34 PM

At least they're responding to issues like this quickly....

Craig.

Alexander Turcic · 10-31-2004, 07:02 PM

True, it could have been worse. Like fixing an exploit by bringing in another one (IE users know what I am talking about).

10-29-2004, 04:06 PM	#1
Colin Dunstan Is papyrophobic! Posts: 1,926 Karma: 1009999 Join Date: Aug 2003 Location: USA Device: Dell Axim	Got Gmail? Perhaps you are already hacked! Google's Gmail is vulnerable to a security exploit that might allow hackers full access to your email account simply by knowing your username, according to Nana Netlife Magazine: "Everything could get publicly exposed – your received mails might be readable, as well as all of your sent mail, and furthermore – anyone could send and receive mail under your name", thus reveals Nir Goldshlagger, an Israeli hacker, on an exclusive interview with Nana NetLife Magazine. "Even more alarming", he explains, "is the fact that the hack itself is quite simple. All that is needed of the malicious hacker, beside knowledge of the specific technique, is quite basic computer knowledge, the victim's username – and that’s it, he's inside". Google admitted to the security flaw and is working on a fix. One tip for Google: Stay beta forever, then you don't have to bother with legal claims at the end.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
K3 hacked	Tiersten	Amazon Kindle	57	09-23-2010 10:32 PM
PRS-600 Really Hacked at ebookstore	Coreman	Sony Reader	5	06-01-2010 12:33 AM
starting to get hacked off	crash86	Sony Reader	2	04-23-2009 06:59 AM
Gmail-mobile PHP script for accessing Gmail via WAP	Alexander Turcic	Lounge	4	09-10-2004 04:41 PM
gmail copy (gmcp) - Perl script to copy files to/from Gmail	Colin Dunstan	Lounge	0	09-04-2004 02:24 PM

10-30-2004, 05:17 PM	#2
Alexander Turcic Fully Converged Posts: 18,171 Karma: 14021202 Join Date: Oct 2002 Location: Switzerland Device: Too many to count here.	Google has fixed the flaw: "Google was recently alerted to a potential security vulnerability affecting the Gmail service. We have since fixed this vulnerability, and all current and future Gmail users are protected," Google spokesman Nathan Tyler said. An investigation by Google found that only a handful of Gmail users were victimized, the source close to the Mountain View, California-based company said. Now I wonder how would they be able to investigate who exactly was victimized?

10-31-2004, 06:34 PM	#3
cbarnett MR prodigal son Posts: 1,085 Karma: 1083739 Join Date: Mar 2003 Location: Australia Device: Kobo Aura H2O	At least they're responding to issues like this quickly.... Craig.

10-31-2004, 07:02 PM	#4
Alexander Turcic Fully Converged Posts: 18,171 Karma: 14021202 Join Date: Oct 2002 Location: Switzerland Device: Too many to count here.	True, it could have been worse. Like fixing an exploit by bringing in another one (IE users know what I am talking about).

Advert