<!doctype html public "-//W3C//DTD W3 HTML//EN">
<html><head><style type="text/css"><!--
blockquote, dl, ul, ol, li { padding-top: 0 ; padding-bottom: 0 }
--></style><title>GMail hack, ref security
issues</title></head><body>
<div><x-tab>
</x-tab>http://it.slashdot.org/article.pl?sid=08/08/19/1433206</div>
<div><br></div>
<div><font face="Helvetica" color="#090909">"A tool
that</font><font face="Helvetica" color="#7A6E4E"><u> automatically
steals IDs of non-encrypted sessions</u></font><font face="Helvetica"
color="#090909"> and breaks into Google Mail accounts has been
presented at the Defcon hackers' conference in Las Vegas. Last week,
Google introduced a new feature in Gmail that allows users to
permanently switch on SSL and use it for every action involving Gmail,
not just authentication. Users who did not turn it on now have a
serious reason to do so, as Mike Perry, the reverse engineer from San
Francisco who developed the tool, is planning to release it in two
weeks."</font></div>
<x-sigsep><pre>--
</pre></x-sigsep>
<div><font color="#000000"><b>Victoria L. Herring, Attorney in Des
Moines, Iowa</b> - Civil rights, Discrimination &
Employment Law, http://www.herringlaw.com. Ph. 515/255-4475;
iChat AV: victoriaherring@mac.com; Skype:
vlherring.</font></div>
</body>
</html>