full-disclosure - Slashdot: Gmail Accounts Vulnerable to XSS Exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <4b6ee931041031051324ecbe1e@mail.gmail.com>
From: xploitable at gmail.com (n3td3v)
Subject: Slashdot: Gmail Accounts Vulnerable to XSS Exploit

On Sun, 31 Oct 2004 03:05:09 -0500, Nancy Kramer
<nekramer@...dtheater.net> wrote:
> Google is very secretive about everything.  Don't expect them to share
> information.
> 
> Regards,
> 
> Nancy Kramer
> Webmaster http://www.americandreamcars.com
> Free Color Picture Ads for Collector Cars
> One of the Ten Best Places To Buy or Sell a Collector Car on the Web

Fair enough google may not want to release the technical detail of the
vulnerability, but remember its not just google that have it.

Third parties, security research groups, the news website, and the
hacker and probably a bunch of his friends.

A leak by a third party is bound to come sooner or later I suspect. :-)

Thanks,

n3td3v