Friday, December 17, 2010

GOOGLE BUG LETS MALICIOUS WEBSITES HARVEST YOUR EMAIL

A bug in the Google Apps Script API could have allowed for emails to be sent to Gmail users without their permission according to Google. The bug in Google had been demonstrated by a web page hosted on Google Blogger. This web page gathered the Google account email address of the user visiting the web page and send an email to it. Google, has released a fix to this issue after an article exposing the privacy threat appeared on Techcrunch written by Michael Arrington who, in turn, had given voice to the author of the exploit complaining of the lack of interest from Google security response team.

No comments: