GMail messages are vulnerable to interception.
An attacker has only to transmit malformed test messages to himself, and information left over in memory, from previous messages destined for other people, will appear with the test messages, in the attacker's inbox. Sometimes, this information may include usernames and passwords... Do you use GMail? Are you communications private? Should they be? Well, here's what HBX Networks figured out about the issue, that may or may not help you - or perhaps GMail, if anyone can get ahold of their developers, to tell them about it.
UPDATE: The bug was fixed about one hour after the story broke on Slashdot.
12:20:01 PM
|
|