The Inquirer-Home

Google denies CSRF vulnerability

Nibble Gmail is safe dammit
Wed Mar 04 2009, 13:35

SEARCH OUTFIT GOOGLE has reacted angrily to a post on the Full Disclosure mailing list claiming that Gmail has been vulnerable to a Cross-Site Request Forgery (CSRF) attack since the summer of 2007.

Researchers furious that Google had done sod-all about the problem since they warned them about it released information on the attack.

Google admitted that it had been aware of this report for some time, and did not consider this case to be a significant vulnerability.

No one has ever reported it being exploited, so go back to bed. µ

L'Inq
Tech Herald

 

 

Share this:

Comments

There are no comments submitted yet. Do you have an interesting opinion? Then be the first to post a comment.

aboutus
Advertisement
Subscribe to INQ newsletters
Advertisement
INQ Poll

Authorities in several countries raided Megaupload recently, shut down all of its services, seized hundreds of servers and arrested several of its executives on criminal charges.

Do you think the move was justified?