Your Gmail Contact List Can Be Stolen

Yes! It’s true. GMail has a vulnerability to contact list hijacking. Your GMail contact list can be stolen. The only condition is you have to be logged in to GMail at the time of the attack. GMail is setup to store your contact list in javascript files, which is the core problem. More details about the vulnerability, click here.

I’m sure The Google Security Team has been notified of this problem.

UPDATE (2/1/2007 - 2:07am)

Leave a Reply