Comments on: Google GMail E-mail Hijack Technique http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/ Information Security Think Tank Thu, 11 Mar 2010 22:49:16 +0000 http://wordpress.org/?v=2.9.1 hourly 1 By: Consejos para proteger tu dominio « clipping de internet http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-5/#comment-128083 Consejos para proteger tu dominio « clipping de internet Thu, 07 Jan 2010 00:41:49 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-128083 [...] de algún sujeto sin escrúpulos. Tal vez el caso mas paradigmático sea el de tonterias.com donde un fallo en Gmail hizo posible que cayera en manos de de quien no [...] [...] de algún sujeto sin escrúpulos. Tal vez el caso mas paradigmático sea el de tonterias.com donde un fallo en Gmail hizo posible que cayera en manos de de quien no [...]

]]> By: А ты уверен в безопасности своего gmail? « GCoda http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-5/#comment-128061 А ты уверен в безопасности своего gmail? « GCoda Sat, 19 Dec 2009 13:57:42 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-128061 [...] и davidairey езе рекомендую почитать о том как можно было увести ящик на google mail Добавь ссылку к [...] [...] и davidairey езе рекомендую почитать о том как можно было увести ящик на google mail Добавь ссылку к [...]

]]> By: tiesto http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-5/#comment-127843 tiesto Tue, 15 Sep 2009 04:37:27 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-127843 Love You Gmail :p Love You Gmail :p

]]> By: How to Find if Someone is Spying your Gmail Account | Technobuz http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-5/#comment-127664 How to Find if Someone is Spying your Gmail Account | Technobuz Sat, 01 Aug 2009 06:23:00 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-127664 [...] See about the bug/flaw here:Google GMail E-mail Hijack Technique [...] [...] See about the bug/flaw here:Google GMail E-mail Hijack Technique [...]

]]> By: Los agujeros de Google | Geekotic http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-5/#comment-127499 Los agujeros de Google | Geekotic Wed, 17 Jun 2009 22:14:44 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-127499 [...] exploits y agujeros de seguridad que esta sufriendo Google actualmente. Desde un bug de Gmail que permite el reenvío de emails que cumplan determinadas condiciones al atacante hasta uno relacionado con el sistema de encuestas [...] [...] exploits y agujeros de seguridad que esta sufriendo Google actualmente. Desde un bug de Gmail que permite el reenvío de emails que cumplan determinadas condiciones al atacante hasta uno relacionado con el sistema de encuestas [...]

]]> By: rmadeat http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-5/#comment-127467 rmadeat Thu, 11 Jun 2009 15:33:36 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-127467 Quote : Wow, lifesavers, you guys totally rock. My problem is that I think I have a total data stream process on me - from gmail, devart, facebook, google searching - everything. May also have got into or are trying to get into my ISP email. My complete digital footprint seems to have been uplifted and is being taunted back to me on various bogus sites found through combining my various identity markers in google searches. Quote :

Wow, lifesavers, you guys totally rock. My problem is that I think I have a total data stream process on me – from gmail, devart, facebook, google searching – everything. May also have got into or are trying to get into my ISP email. My complete digital footprint seems to have been uplifted and is being taunted back to me on various bogus sites found through combining my various identity markers in google searches.

]]> By: Backdoor Into Gmail « memoirs on a rainy day http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-5/#comment-126225 Backdoor Into Gmail « memoirs on a rainy day Tue, 03 Mar 2009 01:31:32 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-126225 [...] Published March 3, 2009 asides , technology Tags: asides, Gmail, technology There was a backdoor into Gmail. Its been [...]

]]> By: Jay http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-5/#comment-125946 Jay Fri, 13 Feb 2009 02:50:33 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-125946 Wow, lifesavers, you guys totally rock. My problem is that I think I have a total data stream process on me - from gmail, devart, facebook, google searching - everything. May also have got into or are trying to get into my ISP email. My complete digital footprint seems to have been uplifted and is being taunted back to me on various bogus sites found through combining my various identity markers in google searches. Wow, lifesavers, you guys totally rock. My problem is that I think I have a total data stream process on me – from gmail, devart, facebook, google searching – everything. May also have got into or are trying to get into my ISP email. My complete digital footprint seems to have been uplifted and is being taunted back to me on various bogus sites found through combining my various identity markers in google searches.

]]> By: Acunetix Web Application Security Blog » How can any web page log you off all other websites? http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-5/#comment-124921 Acunetix Web Application Security Blog » How can any web page log you off all other websites? Mon, 29 Dec 2008 15:16:28 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-124921 [...] Major sites such as Gmail were previously found to be vulnerable to CSRF. In the case of Gmail, attackers were able to add an email filter that forwarded the victim’s emails to their own email [...] [...] Major sites such as Gmail were previously found to be vulnerable to CSRF. In the case of Gmail, attackers were able to add an email filter that forwarded the victim’s emails to their own email [...]

]]> By: GMAIL phishing attack saga | SECFORCE :: Blog http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-5/#comment-124542 GMAIL phishing attack saga | SECFORCE :: Blog Mon, 01 Dec 2008 10:33:44 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-124542 [...] It all seemed that a new version of an old GMail hijack technique [...] [...] It all seemed that a new version of an old GMail hijack technique [...]

]]> By: Gmail???????????? | ????JI http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-5/#comment-124503 Gmail???????????? | ????JI Sat, 29 Nov 2008 01:07:18 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-124503 [...] GNUCitizen?Petko D. Petkov??Gmail???????????????????cross-site request forgery exploit????????? [...] [...] GNUCitizen?Petko D. Petkov??Gmail???????????????????cross-site request forgery exploit????????? [...]

]]> By: Daniel Hepper » Blog Archive » Gmail CSRF vulnerability explained http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-5/#comment-124491 Daniel Hepper » Blog Archive » Gmail CSRF vulnerability explained Thu, 27 Nov 2008 23:13:43 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-124491 [...] Gmail had a CSRF vulnerability in September 2007. Google was upfront enough to note that fact in their post, but it has been fixed a long time ago. [...] [...] Gmail had a CSRF vulnerability in September 2007. Google was upfront enough to note that fact in their post, but it has been fixed a long time ago. [...]

]]> By: Zero Day mobile edition http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-4/#comment-124481 Zero Day mobile edition Wed, 26 Nov 2008 15:19:42 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-124481 [...] 2.0 Following the speculations on the resurrection of what's thought to be an already fixed Gmail flaw which could assist in domain name hijackings, yesterday Google commented that their investigation [...] [...] 2.0 Following the speculations on the resurrection of what’s thought to be an already fixed Gmail flaw which could assist in domain name hijackings, yesterday Google commented that their investigation [...]

]]> By: Google Says Gmail Hack was a Phishing Scheme http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-4/#comment-124480 Google Says Gmail Hack was a Phishing Scheme Wed, 26 Nov 2008 14:43:32 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-124480 [...] GNUCitizen claimed that the hackers used a multipart/form-data POST to gain access to the Gmail account but yesterday Google claimed this wasn’t the case. [...] [...] GNUCitizen claimed that the hackers used a multipart/form-data POST to gain access to the Gmail account but yesterday Google claimed this wasn’t the case. [...]

]]> By: How secure is your domain name? http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-4/#comment-124471 How secure is your domain name? Tue, 25 Nov 2008 13:00:36 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-124471 [...] advantage of this and used a google mail security flaw to hijack his domain name. Once the scumbag had Davids email he simply put in a domain transfer request from ICDSoft and transferred the domain name to [...] [...] advantage of this and used a google mail security flaw to hijack his domain name. Once the scumbag had Davids email he simply put in a domain transfer request from ICDSoft and transferred the domain name to [...]

]]> By: » Vecchia Falla di Google Ancora Pericolosa! http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-4/#comment-124463 » Vecchia Falla di Google Ancora Pericolosa! Mon, 24 Nov 2008 21:50:58 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-124463 [...] fine Settembre 2007 GNUCitizen prima descrive sommariamenteuna pericolosa vulnerabilit nel meccanismo di autenticazione di GMail,e poi – dopo la [...]

]]> By: CSRF/XSS in GMail leads to domains being stolen | Mike Andrews http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-4/#comment-124457 CSRF/XSS in GMail leads to domains being stolen | Mike Andrews Mon, 24 Nov 2008 14:42:51 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-124457 [...] over the weekend points to a new version of a previous exploit against GMail being used to steal user’s domains through register [...] [...] over the weekend points to a new version of a previous exploit against GMail being used to steal user’s domains through register [...]

]]> By: Gmail Security Flaw | GNUCITIZEN http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-4/#comment-124452 Gmail Security Flaw | GNUCITIZEN Mon, 24 Nov 2008 13:05:15 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-124452 [...] of apparently new Gmail bug similar to the one which I partially and than fully disclosed here, of course after working with the vendor to resolve the problem, which is always the right thing to [...] [...] of apparently new Gmail bug similar to the one which I partially and than fully disclosed here, of course after working with the vendor to resolve the problem, which is always the right thing to [...]

]]> By: Gmail Security Flaw Proof of Concept http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-4/#comment-124442 Gmail Security Flaw Proof of Concept Sun, 23 Nov 2008 23:05:15 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-124442 [...] First Filter Exploit POC [has since been patched] [...] [...] First Filter Exploit POC [has since been patched] [...]

]]> By: Simple Way to Check Whether Your Gmail Account Has Been Hack or Not http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique/comment-page-4/#comment-124440 Simple Way to Check Whether Your Gmail Account Has Been Hack or Not Sun, 23 Nov 2008 19:00:22 +0000 http://www.gnucitizen.org/blog/google-gmail-e-mail-hijack-technique#comment-124440 [...] To go depth in to the process of Gmail hijacking, u could read in detail at GNUCITIZEN site in Google GMail E-mail Hijack Technique [...] [...] To go depth in to the process of Gmail hijacking, u could read in detail at GNUCITIZEN site in Google GMail E-mail Hijack Technique [...]

]]>