[DM-MUG] GMail hack, ref security issues

[Victoria L. Herring]

	http://it.slashdot.org/article.pl?sid=08/08/19/1433206

"A tool that automatically steals IDs of non-encrypted sessions and 
breaks into Google Mail accounts has been presented at the Defcon 
hackers' conference in Las Vegas. Last week, Google introduced a new 
feature in Gmail that allows users to permanently switch on SSL and 
use it for every action involving Gmail, not just authentication. 
Users who did not turn it on now have a serious reason to do so, as 
Mike Perry, the reverse engineer from San Francisco who developed the 
tool, is planning to release it in two weeks."
-- 
Victoria L. Herring, Attorney in Des Moines, Iowa -  Civil rights, 
Discrimination & Employment Law, http://www.herringlaw.com.  Ph. 
515/255-4475;  iChat AV:  victoriaherring at mac.com;  Skype:  vlherring.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://cialug.org/pipermail/dmmug/attachments/20080902/84a675c7/attachment.htm