A technique used by marketers to trick people into signing up for "free" merchandise could easily be re-deployed as an engine for harvesting untold numbers of Google account passwords. Fixing the issue won't be trivial for Google, because the exploit is fundamental to how Google allows users to recover access...

<A HREF="http://www.technologyreview.com/blog/mimssbits/27863/?p1=blogs">Read More</A>