Re: Malicious Setting Up of Filters in Gmail?
Google Blogoscoped —
Google says that recent reports on a Gmail vulnerability aren’t true (Google might mean this one at GeekCondition.com, as blogged here earlier; my emphasis in the quote):
<<We’ve seen some speculation recently about a purported security vulnerability in Gmail and the theft of several website owners’ domains by unauthorized third parties. At Google we’re committed to providing secure products, and we mounted an immediate investigation. Our results indicate no evidence of a Gmail ...
Google Says Reports of Gmail Flaw Unfounded
eWeek - RSS Feeds —
Google says GeekCondition.com's claims about a Gmail vulnerability are incorrect. The issue is just an example of a successful phishing attack targeting Web domain owners, Google says. Google officials have challenged the assertion that a ...
Google Pins Gmail Bug On Phishing
InformationWeek - All Stories And Blogs —
... security engineer Chris Evans in a blog post explained that in response to speculation about an alleged security vulnerability in Gmail, Google has looked into the matter and found no evidence of a Gmail vulnerability. On Sunday, in a ...
Phishing Emails Responsible for Domain Hijackings: Google
Digital Inspiration - Technology Blog —
Google engineers have posted a detailed explanation saying that the recent domain hijacking related incidents were due to phishing and not because of any security flaws in the Gmail software.
According to Google, attackers had sent e-mail messages to web domain owners asking them to visit fraudulent websites, such as "google-hosts.com", with the purpose of collection their Google login credentials. Once they had access to the Google mail accounts, they would set up filters designed to forward email conversations with web domain providers.
To ...
Gmail “Hack” is Nothing But a Phishing Scheme
Mashable! —
... Now, Google has reacted. They claim they’ve investigated the issue, and found no vulnerability. The entire thing is a mere phishing scheme; the victims would give away their Gmail credentials to a phishing site, and then the attackers would be able to change the filters. To be safe from phishing attempts, well, all I can say is this: don’t listen to people you don’t know and don’t click on shady links. ...
Gmail security ‘vulnerability’ and recent phishing activity
D' Technology Weblog —
... Reports that a purported Gmail vulnerability was being used by unauthorized third parties to hijack domains turned out to be a phishing scam, Google announced “our results indicate no evidence of a Gmail vulnerability, with help from affected users, we determined that the cause was a phishing scheme” ...
Google Gmail vulnerabilities blamed on users and Phishing
PR News: —
... security engineer said in a recent post explained a little about the alleged security vulnerability in Gmail and Google have looked into this pretty hard and found that there was no evidence of Gmail vulnerability. Evans recommends that Google users only enter Gmail sign-in credentials to Web addresses starting with https://www.google.com/accounts and that they “never click-through any warnings your browser may raise about certificates.” ...
Linkpost | 11.26.2008
TechBlog —
... - Google says reports of domain hijack vulnerability are incorrect . • Microsoft's Zune To Evolve Into New "Pink" Smart Phone? and ...
Google: Domain Thefts Not Caused By Gmail Vulnerability
WebProNews Feed —
... first started to circulate that a hacker could gain control of Gmail accounts and move from them to GoDaddy accounts. The number of folks claiming to have been affected by this trick grew, and press coverage increased. Sooner or later, the hubbub seemed sure to create a measurable dent in Gmail's market share. Information Security Engineer Chris Evans investigated the issue and has responded on the Google Online Security Blog , however, writing, "Our results indicate no evidence of a Gmail vulnerability. With help from affected users, we determined that the cause was a ...
Gmail Is Secure, Says Google [Gmail]
Lifehacker —
[image] If you've read recent speculation that a Gmail vulnerability may be lurking in the depths of your email account, Google wants to assure you that Gmail is secure as ever . According to the post on the Google Online Security Blog, stories ...
Reports of a Gmail security flaw are proven false
Boy Genius Report —
A recent rumor of a Gmail security vulnerability that reportedly led to people having their domains hijacked was proven to be false on Wednesday. The rumor claims that a flaw in Gmail allowed unauthorized users to access a user’s Gmail account and create a forwarding filter without their knowledge; effectively stealing all incoming email. The flaw, reported by Geek Condition, was brought to light on Sunday with several Gmail users complaining that their domain names were hijacked because of this vulnerability. Google launched their own investigation and ...
Best New and Improved Software of 2008 [Best Of 2008]
Lifehacker —
... . In the midst of all this, the Gmail security team took the time to respond to a breach that several users had experienced and blogged about online. Clearly there's someone home at Gmail; this is a rapidly-evolving product that any webapp developer should use as an example on how to iterate quickly. Honorable Mentions Making best-of-year lists is always difficult because you risk leaving off really deserving items. At least two that go in our honorable mentions bin are the ...



