Slashdot Mirror

← Back to Stories (view on slashdot.org)

GoogHOle Exploits GMail, Picasa and 200K Other Sites

Posted by CmdrTaco on from the hate-when-that-happens dept.

Giorgio Maone writes "Multiple Google-targeted exploits disclosed in the past 3 days could compromise your GMail account, steal your pictures from Picasa or impersonate you on almost 200,000 big sites which outsourced their search engines (vulnerabilities included in the price). If even Google, a very reactive company when web security matters, does face this kind of problems, how serious is the threat and what can you do, as a "normal" web user, to protect yourself?"

2 of 167 comments (clear)

  1. Very few details. by Poromenos1 · · Score: 5, Interesting

    The article is very low on details. I read it and I'm still not sure how it works, whom it affects and what I can do to protect myself (obviously, since I don't know how it works).

    It would have been nice if they went into some more detail for technical users.

    --
    Send email from the afterlife! Write your e-will at Dead Man's Switch.
  2. Re:The real question: by MrMr · · Score: 5, Interesting

    Just quoting from the original so called 'Google' messages

    If you've read our previous post Say Cheese! then you know that Google's Picasa registers the picasa:// URI in the Windows registry and it is possible to abuse this registered URI through a Cross-Site Scripting exposure to steal a victim's images.

    So that's a windows only exploit?
    We could not possibly blame that on windows.