http://security.itworld.com/4341/070926gmailflaw/page_1.html
I came across this article and it concerned me a great deal since I do have a G-mail account. There are zero-day bugs which are (according to wikipedia) computer threats that expose undisclosed or unpatched computer application vulnerabilities. Zero-day attacks take advantage of computer security holes for which no solution is currently available. In the article it says that hackers can use Gmail's filtering feature to exploit this bug and, "An attack would start with a victim visiting a malicious Web site while also still logged into his Gmail account. The malicious site would then perform what Petkov called a 'multipart/form-date POST' -- an HTML command that can be used to upload files -- to one of the Gmail application programming interfaces, then inject a rogue filter into the user's filter list."
I haven't done much research about other zero-day attacks but this is definitely a security issue that needs to be taken care of ASAP because who knows how quick hackers can act on this getting as much information as they can before the bugs "fixed." The article also mentions other applications such as Apple Inc.'s QuickTime, Microsoft Corp.'s Windows Media Player and Adobe Systems Inc.'s Portable Document Format (PDF) that have been affected by zero-day bugs.
This part of the article got me the most, "Web mail accounts are in many ways more valuable than a banking account because they maintain access to many other online accounts (blog, banking, shopping, etc.). [Attacks exploiting this vulnerability would be] simple, silent and extremely clever."
SCARY!!! Keep an eye on all yo' SHhhhhh
Thursday, September 27, 2007
Subscribe to:
Post Comments (Atom)
No comments:
Post a Comment