SEO

GMail Exploit Fixed

Yesterday the New Year brought upon us many global happenings, and bugs here at Search Engine Journal, but the biggest tech problem of January 1st may have been the exploit of a GMail weakness which exposed user web contacts.

Engadget covers:

The exploit takes advantage of the fact that Google puts your details into a JS file. As a result, if you’re logged into Gmail and browsing the web, any rogue website can declare the function “google” and then parse all your contacts.

The only way to safeguard yourself is to disable Javascript in your browser (or enabled it for trusted sites only) or simply climb into a hole and not browse while logged into Google services like Gmail, Blogger, Orkut, Reader, Calendar, etc. — you know, the sites you typically have open all day long.

And from Googlefied, the original source of the story, (Googlefied also lists an FAQ list about the exploit) it seems that Google has addressed the problem:

Finally, about an hour ago or so, Google has patched the vulnerability, thoroughly, as far as I can tell. That’s like thirty hours after I notify the Google Security team. It’s new year, people.

Well, the bug has been fixed, but I guess some people will still have questions about it.

Screen Shot 2014 04 15 at 7.21.12 AM GMail Exploit Fixed
Loren Baker is the Founder of SEJ, an Advisor at Alpha Brand Media and runs Foundation Digital, a digital marketing strategy & development agency.
Screen Shot 2014 04 15 at 7.21.12 AM GMail Exploit Fixed

Comments are closed.

5 thoughts on “GMail Exploit Fixed

  1. Hi Loren,
    Many people recently complained that their gmail account got deleted, and they lost everything. They were using latest release of FF. Is this related to that? As FF allows JS by default. The information provided by you is helpful.
    Thanks

  2. Thanks a lot for that Loren.
    Coming back to the GMail Exploit, I am glad that it has been fixed now, as I always use JS within FF while surfing on the net. Now can do that without any threat. Thanks