Gmail is not an iron wall
|
Gmail, a widely used email service under Google, has recently exposed a vulnerability that allows anyone to obtain a large number of Gmail email account information in order to post spam or even steal passwords. It is reported that the vulnerability may have existed for several years. The vulnerability was discovered by Oren Hafif, an employee from an Israeli security company who has previously discovered multiple Gmail vulnerabilities. Hafif said that by exploiting the vulnerability discovered this time, a large number of Gmail email accounts can be obtained within a few days or weeks. Although this vulnerability cannot directly steal account passwords or log in to accounts, it may put users at risk of spam, phishing or password theft. The reason why the vulnerability can be exploited is that Gmail has a little-known account sharing function, which allows users to "delegate" other users to log in to their own accounts. Last November, Hafif discovered that when trying to log in to someone else's account through the "delegate" function, you only need to make a slight change to the web page address that pops up to obtain the email address of another user. With the help of software that automatically changes web addresses, Hafif once collected 37,000 Gmail email addresses in two hours. In this regard, Hafif said that he had good reason to believe that all Gmail accounts may have been collected. In addition, he emphasized that the vulnerability affects not only personal mailboxes, but also corporate users who use Gmail mailboxes, and even Google itself. Hafif said that Google did not use cookies or other forms of authentication to display vulnerable pages, so it only needed to use anonymous software to obtain a large amount of user account information without being noticed. Hafif said that since Gmail has had a "delegation" function since 2010, the vulnerability may have existed for several years. As for how much account information has been secretly collected, it is unknown. A Google spokesperson said in an interview that the vulnerability has been successfully fixed. As a winner of Toutiao's Qingyun Plan and Baijiahao's Bai+ Plan, the 2019 Baidu Digital Author of the Year, the Baijiahao's Most Popular Author in the Technology Field, the 2019 Sogou Technology and Culture Author, and the 2021 Baijiahao Quarterly Influential Creator, he has won many awards, including the 2013 Sohu Best Industry Media Person, the 2015 China New Media Entrepreneurship Competition Beijing Third Place, the 2015 Guangmang Experience Award, the 2015 China New Media Entrepreneurship Competition Finals Third Place, and the 2018 Baidu Dynamic Annual Powerful Celebrity. |
<<: China Mobile: TD-LTE voice call success rate has reached 98%
>>: Nanjing Mobile 4G users were cheated and cried: the phone lost connection after turning on
Recommend
The Essence of Gravitation
The concept of gravity Gravity is the interaction...
Tesla electric truck price announced: starting price is less than 1 million RMB
We all know that the pure electric sedans and SUV...
How much is a wild horse: How many factors affect SEO rankings? What are they?
Search engine optimization is affected by many fa...
How much does mutton cost per pound? What is the current market price of mutton?
With the arrival of autumn, the demand for mutton...
Live broadcast training camp: Create a million-dollar live broadcast room to teach you how to sell goods through live broadcast and seize the live broadcast boom
In order to help companies quickly cultivate live...
3.15 Know More | Uncover the Truth Behind “Free WiFi”
The 3.15 Gala exposed that the "free WiFi&qu...
Families, those who like flat-faced puppies are in luck
Families, those who like flat-faced puppies are i...
What is the nose under the bow of a boat for? Without it, the boat can't go fast.
Have you ever noticed those ocean-going cargo shi...
By mastering these points, you can also plan an event that will sweep your circle of friends!
All of you in the Internet industry should be awa...
Do you know how to wash and maintain these quilts?
How to wash and maintain the quilt The autumn rai...
Rumor has it that the iPhone 7 will be equipped with these features: 5-inch screen and dual cameras
January 12, Apple has achieved great success in 2...
How do you plan a successful event and ensure that expectations are met?
A good product may not be known to anyone. After ...
No need to install the app, WeChat applet printing experience: I found it really useful after using it
At present, printing products are indispensable f...
Chifeng SEO training: Regularly summarizing SEO-related data indicators is an important reference system for measuring the value of one's own work
Improve SEO: Actually, it means improving the pro...