Google Gmail, Other Apps, Vulnerable To Attackers , Hackers

Posted by : Dexter Panganiban on October 14, 2008 | ; Filed Under Gooogle

Google Gmail, Other Apps, Vulnerable To Attackers The following news shocked me when I saw this, It has been reported that Google Gmail and other Google Application is prone to hackers.

Adrian ‘pagvac’ Pastor, a security researcher with GNUCitizen.org, on Friday posted proof-of-concept code that can inject a third-party page — a fake login page in Pastor’s example — while the user’s browser address bar still displays the Google domain. This could dupe the user into entering login details.

"The beauty of frame injection attacks is that the attacker is able to impersonate a trusted entity without needing to bypass XSS/HTML filters or even break into the target server," Pastor explained on the GNUCitizen site.

In a related blog post on Friday, security researcher Aviv Raff explained that Google is vulnerable to "a cross-domain Web-application sharing security design flaw."

And According to the news this flaw has been seen since April and Google is not yet taking any action.

"Today, after not getting any further response from the Google security team about this issue, and after Adrian published his proof-of-concept, I’ve decided to reveal this information in a hope that this security design flaw will be fixed by Google as soon as possible," said Raff.

In reference to the proof-of-concept, a Google spokesperson said, "We’re aware of the potential for this kind of behavior when services are hosted across multiple domains, and we take steps to restrict it where we believe it may have security consequences."

Well Google has to explain this one on their official site, so that their E-mail user will feel comfortable on using their Free E-mail. And Did you know that E-mails can be tracked ?. So better keep a hard copy or printed copy of those E-mails that needs protection such as username and passwords that still resides in your mailbox. Better transfer it to your PC for safe keeping purpose. Better to that or be sorry later on. What if they hack our AdSense Earnings ? So Be Careful .

via www.informationweek.com

www.google.com/mobile/gmail | GMail on Mobile Cellphone | Google Mobile on Phone
www.google.com/mobile/gmail | GMail on Mobile Cellphone | Google Mobile on Phone Have you tried using you Gmail on Mobile Phone ? For Me, I always use this because I found it easy to use specially if your house is a wifi zone . I am using Nokia E71 in browsing my email thru Gmail Mobile. So if yo...
www.gmail.com account
Do you know the difference of www.gmail.com account from other accounts such as www.yahoo.com mail , www.aol.com mail for me I think there are lots of difference and I could say that www.gmail.com account is better among other choices that I mention. www.gmail.com account have lots of features that ...
Official Gmail Blog launched
Now you may know the latest news about Gmail because Gmail has launched their official Official Gmail Blog a paragraph from their website. And now there's this blog, where we'll keep you up to date on latest from the Gmail team. We'll post feature updates, productivity tips, and some insights int...

Tags: E-mail, Gmail, Hack, Party, Research, Security

About the author

Dexter is a person who loves technology,new gadget, SEO, Social Media and Christianity. Follow him at twitter via @techathand and add him @ Google+ and contact us at admin@techathand.net

Interesting Comments

Note : All Comment will be subjected to Tech At Hand Dot Net Comment Policy

4 Responses to “Google Gmail, Other Apps, Vulnerable To Attackers , Hackers”

Fitz on October 14th, 2008 3:55 pm

Wah! Nakakatakot!

Fitzs last blog post..Cry Poverty — With Style

Reply
Dexter Panganiban Reply:
October 14th, 2008 at 9:47 pm
Yup It is Fitz so better make a back up of your important email and delete from gmail.

Reply
Downloader on October 20th, 2008 8:36 am

this is very alarming!

gotta go backup my files now!

thanks for this info.

Reply
Dexter Panganiban Reply:
October 20th, 2008 at 9:50 pm
You are most welcome See you soon in this blog

Reply