my profile | my password | search | faq & rules | forum home

» Film-Tech Forum ARCHIVE   » Community   » Film-Yak   » Who wants a Gmail account? (Page 2)

This topic comprises 2 pages: 1  2

Author Topic: Who wants a Gmail account? Mike Heenan Phenomenal Film Handler Posts: 1896 From: Scottsdale, AZ, USA Registered: Mar 2000 posted 06-23-2005 07:26 PM                     Looks like it's been fixed since then http://seclists.org/lists/isn/2005/Jan/0039.html Google patches Gmail security hole http://www.computerworld.com/securitytopics/security/story/0,10801,98920,00.html By Matthew Broersma JANUARY 13, 2005 IDG NEWS SERVICE Google Inc. has fixed a bug in its Web-based e-mail service, Gmail, that allowed users to read the contents of other people's messages. HBX Networks, a Unix community group, discovered the bug while testing a Perl script intended to automate sending batches of newsletters. Messages sent to the group's own e-mail address contained HTML code in the "Reply To" field, and this code turned out to be the message body of other users' e-mail messages. The problem appears to be caused by a missing > character in the formatting of the "From" fields generated by the group's Perl script. "This, apparently, was enough to get GMail to provide us with some portion of someone else's messages," HBX members wrote in their analysis yesterday. They speculated that the missing character caused Google's application to read other data into this buffer -- a message that had been sent recently, for example. In at least one case, the intercepted e-mail contained username and password information, the group said. "Regardless of the specific failure, the result is a compromise of the privacy of communications over Gmail," the group wrote. "Message content and address information are easily -- if somewhat randomly -- available to unintended recipients." Google said the problem was fixed shortly after the HBX Networks report appeared. "At 10:15 a.m. PST mails with the problematic formatting as described in your previous story stopped being accepted into Gmail. Previous e-mails that had this problem will also no longer will be accessible. We appreciate your patience and we're sorry about the bug," Chris DiBona, Google's open-source program manager, said in an e-mail to the tech discussion site Slashdot. He urged users to report security bugs to security_at_google.com. HBX expressed concern that other such bugs might exist. "The appearance of this issue, at the user level, probably indicates a failure in GMail's code review and/or quality assurance standards, which may result in other, similar errors," the group wrote. While it is technically still in beta testing, Gmail has become one of the most popular Web-based e-mail services since its launch in April and has begun to come under the same scrutiny as other Google services. Last month, for example, Google fixed a flaw with its desktop search that could have allowed hackers to search the contents of a PC. Security problems are nothing new to Web e-mail. Last March, shortly before Gmail's launch, IT security firm GreyMagic Software demonstrated that scripts could be run in Hotmail and Yahoo Inc.'s Web e-mail, bypassing scripting restrictions. Scripts embedded in e-mail messages could have been used to steal passwords or spread worms, researchers said. The problem has been fixed.  |  IP: Logged Paul J. Neuhaus Expert Film Handler Posts: 126 From: Iraq.. Again! Registered: Jun 2005 posted 06-23-2005 10:50 PM                     Adam You can group e-mails together. All you have to do is have that person or biz in your contacts under that address. example: if you e-mailed me all the time and I wanted to look at all your e-mails all I have to do is go under contacts and select your name. All messages will be listed allong with any replies that you made to that person!  |  IP: Logged Adam Wilbert Jedi Master Film Handler Posts: 590 From: Bellingham, WA, USA Registered: Mar 2002 posted 06-23-2005 11:27 PM                        I didn't know that. But in the case of my amazon store order, one email came from "auto-confirm@amazon.com" one came from "amazon@autosupermart.com" and another came from FedEx with tracking info. Its not really a big deal, since it would be the same with my old email, but since i've gotten used to "conversation view" its suddenly the most annoying thing in the world! I just created a gmail "label" called "order confirmations" and apply that to all of my receipts. That keeps everything organized enough for now.  |  IP: Logged

All times are Central (GMT -6:00)

This topic comprises 2 pages: 1  2

Printer-friendly view of this topic

Hop To: Select a Forum: Category: Operations -------------------- Digital Cinema Forum Film Handlers' Forum Large Format Forum Ground Level Feature Info, Trailer Attachments & REAL Credit Offsets Category: Community -------------------- Film-Yak Film Handlers' Movie Reviews The Afterlife Bob Maar's Joke-A-Thon Category: Classified -------------------- Equipment and Supplies Wanted/For Sale Help Wanted/Seeking Employment Category: System -------------------- Software Beta Testing Forum

The Film-Tech Forums are designed for various members related to the cinema industry to express their opinions, viewpoints and testimonials on various products, services and events based upon speculation, personal knowledge and factual information through use, therefore all views represented here allow no liability upon the publishers of this web site and the owners of said views assume no liability for any ill will resulting from these postings. The posts made here are for educational as well as entertainment purposes and as such anyone viewing this portion of the website must accept these views as statements of the author of that opinion and agrees to release the authors from any and all liability.