Slashdot Mirror

← Back to Stories (view on slashdot.org)

Gmail Accounts Vulnerable to XSS Exploit

Posted by michael on from the ooooooops dept.

mallumax writes "A security hole in GMail has been found (an XSS vulnerability) which allows access to user accounts without authentication. What makes the exploit worse is the fact that changing passwords doesn't help. The full details of the exploit haven't been disclosed. The vulnerability was reported by Israeli news site Nana. They were tipped off by an Israeli hacker. Google has been notified and they are working to close the hole. The Register has the story here."

13 of 232 comments (clear)

  1. FP by Anonymous Coward · · Score: -1, Offtopic

    Frost piss BITCHES!!!

  2. dooy by Anonymous Coward · · Score: -1, Offtopic

    OMFG have you seen the GMAIL 2 trailer it's like slow and it's telling you all the mail you sent in the first one then the music kicks in and and the geek comes out and gets an invite the inbox is on fire and geek is like fuck this im gonna go send an invite and HE SEND ONE TO A SPOOLER with angels singing and he lands on the spammer guys and that annoying scott richter guy is like GO GET EM TIGER! EMAIL IS ON TEH SPOKE!!!~`1 and theres less polys but rawkin bumb mappings you can view this on a special Gmail Invite that comes with a post modded down as "Troll".

    1. Re:dooy by Anonymous Coward · · Score: -1, Offtopic

      yuo=faggort.

  3. doh by Anonymous Coward · · Score: -1, Offtopic

    @gmail.com

  4. Down with Israel by Anonymous Coward · · Score: -1, Offtopic

    Israel is full of hackers, spies, and unsavory politicians.

  5. Re:see... by Anonymous Coward · · Score: -1, Offtopic

    Hey, weren't you the guy offering gmail invites on the GNAA posts? Why don't you post some of those on this story so interested readers can take advantage? It would be ontopic afterall.

  6. Re:I must do my part to help. by Weirdofreak · · Score: 1, Offtopic

    And I'll give one to the first person who can explain how somebody's going to fix it without an account.

    No IPods or the like though. Nyer.

  7. Re:I must do my part to help. by wdconinc · · Score: 0, Offtopic

    Thank you, I sent it to myself ;-)

  8. mo3 up by Anonymous Coward · · Score: -1, Offtopic

    UsEr. 'Now that Simple solution

  9. off topic : gmail invites by peeledback · · Score: 0, Offtopic

    I have 6 ? anybody want? send an email to peeledback ...at..@!#..punkass.com

  10. Re:I must do my part to help. by pipingguy · · Score: 0, Offtopic

    Screw that, I want a free Ipod.

  11. amen to that by contagious_d · · Score: 0, Offtopic
    by Anonymous Coward on Friday October 29, @06:27PM (#10668245)
    Free Flat Screen HERE!
    Please put your fucking "free stuff" spam in your sig, so those of us who turn sig display off to avoid having to read "free stuff" spam don't have to read it. Thank you.
    Log in and say it like a man ;)
    --
    - /home is where the food is.
  12. Rejected by l8f57 · · Score: 0, Offtopic

    2004-10-29 17:01:22 Gmail is open to exploit (Your Rights Online,Security) (rejected)