Tuesday, November 22, 2005

Google downplays Gmail fix

Google has quietly patched a security bug in its Gmail service, but the company is <A HREF="http://www.eweek.com/article2/0,1895,1889050,00.asp?kc=ewnws112105dtx1k0000599">downplaying the severity of the risk</A> to its users. Google confirmed that it made "modifications" to Gmail to cover an attack vector that allowed malicious hackers to take complete control of a victim's Gmail account. The company's confirmation followed the blow-by-blow public disclosure of the bug on the elhacker.net Web site. The elhacker.net advisory described how a Gmail user token could be used in conjunction with other hacking tricks to take control of the victim account.

News Timeline



From Our Sponsor