Your GMail account can easily be hacked! *READ!*

[StianStian is verified member.]

Gmail Security Flaw Proof of Concept

Is it possible for someone to create a malicious filter without having access to your Gmail username and password? No, however, they can force you to create the filter without your knowledge.

The blogosphere is buzzing about a Gmail Security Flaw that has caused some people to lose their domain names registered through GoDaddy.

-----------

This article thoroughly explains (step-by-step) how scammers/hackers gain access to your GMail accounts and steal your domain names.

Most domainers know that you must never use web-based/free e-mail services like GMail for anything related to your domain names/business, but I know that many domainers out there are ignorant/unaware of how big the risk really is.

Maybe this article makes you think twice about using your GMail-account for domain management?

MUST READ!

 

[draggar]

Another great exmple of why you should use two email addresses. One for the WhoIs contact (GMail etc..) and another, more secure, for the registrar contact.

 

[EG.domains]

Gmail is the only Google Product that I don't trust.

I don't use it at all.

 

[Andrew Shaw]

Thats exactly what happend to me last year. They went through gmail. Once they have access to your gmail, they can pretty much go where they want from there.

 

[Sonny Banks]

Never used GMail in my life.

 

[Chuck]

Never used GMail in my life.

Same here Carter, I've never even setup a Gmail account for anything and won't.

 

[steveto]

You should always use an email you know you have full control over, not some free one that if something goes wrong, you are pretty much SOL.

Especially using it for your domain name contact. At least have 2 or 3 email contacts..one for your technical, admin and billing. This way if one is screwed up, you can have backup with your other and refuse any transfer.

 

[breez]

And always log out of every important site (like gmail, paypal, etc, registrars) before continuing surfing so that XSS injections and cookie stealing won't happen.

 

[Arrogance]

Thanks for the heads up on this

 

[Sonny Banks]

And always log out of every important site (like gmail, paypal, etc, registrars) before continuing surfing so that XSS injections and cookie stealing won't happen.

This is right.
And always clear the cookies before you turn off your computer.

 

[xrvel]

And always log out of every important site (like gmail, paypal, etc, registrars) before continuing surfing so that XSS injections and cookie stealing won't happen.

After we log out from the website, sometime there are some cookies left. We should remove it manually from browser option k:

 

[Mr. DeletedMr. Deleted is verified member.]

i use www.google.com/a, same app, but cause it is on my own domain, most hackers don't bother looking at it

 

[cleverlyslick]

Another great exmple of why you should use two email addresses. One for the WhoIs contact (GMail etc..) and another, more secure, for the registrar contact.

pm sent

 

[Deleted member 70408]

I think this Google Security blog update should also be read:

http://googleonlinesecurity.blogspot.com/2008/11/gmail-security-and-recent-phishing.html

 

[Dale Hubbard]

Does this warning apply to Google apps where you have your MX record hosted there?

 

[GAMEFINEST]

lol,

everything has a flaw guys