Gmail Bug Invites Spammers To Your Mail Account

January 2nd, 2007 | RSS Feed

If you're new here, you may want to subscribe to our Full RSS feed to get a daily digest of news around search engine industry.

The recent Gmail bug poses a serious security threat to users. The spammers can access your Gmail accounts if you open Gmail and browse the web. It is due to the fact that Google keeps user's account details in a JS file.

The Engadget reports, 'we hate to break the bad news at the dawn of the new year but there's a weakness in Gmail which exposes your email address to any web site capable of exploiting the bug. As reported on Digg, the exploit takes advantage of the fact that Google puts your details into a JS file. As a result, if you're logged into Gmail and browsing the web, any rogue website can declare the function "google" and then parse all your contacts.”.

In order to obstruct the spammers, the users must disable Javascript in the browser while accessing Google services such as gmail, blogger, orkut, reader calendar etc. You can allow the Javascript for the trusted sites only.

Click here to subscribe to our RSS feed to get a daily digest of news around search engine industry. PageTraffic SEO Blog is updated four times a day and is ranked as one of the best search engine resources blog by Pandia!

Did you like this article?

Finally, Google Kills Gmail Bug
We reported about the pitfalls of Google Mail. In the story, we discussed how gmail contact lists ca...
Themes for your Gmail Account
We had been anticipating Google's web mail client Gmail to add some themes for the last few months...
Now Manage Tasks With Gmail!
Gmail now allows you to handle your emails and important tasks at the same time! Google has recently...
Now Add Your “Location” to Your Email Signature In Gmail!
Gmail Outage Leaves Users Helpless and Frustrated!

Comments

This website uses IntenseDebate comments, but they are not currently loaded because either your browser doesn't support JavaScript, or they didn't load fast enough.

1023One Response2007-01-02+14%3A07%3A38Navneet+Kaushal to “Gmail Bug Invites Spammers To Your Mail Account”

Finally, Google Kills Gmail Bug » Unofficial SEO Blog - Search Engine Information, much before it’s official. Says:
January 3rd, 2007 at 05:20
[...] We reported about the pitfalls of Google Mail. In the story, we discussed how gmail contact lists can be downloaded by adding a code to user's server and exploiting Google's java script API. The gmail bug posed serious security threat to the users since their contacts are open for the spammers. If Googlified post is to be believed, the gmail bug has been removed by Google just after 30 hours of the problem. [...]