Fergie's Tech Blog

Teenager Claims to Find Code Flaw in Gmail

Jeremy Kirk writes on InfoWorld:

A teenage blogger claims to have discovered a flaw in Google's Gmail service that allows JavaScript to run, potentially allowing a malicious hacker to gather e-mail addresses or compromise an account. The supposed flaw may already have been fixed, however.

The teenager identifies himself in his blog as a 14-year-old named Anthony. His entry about Gmail is at:

http://ph3rny.blogspot.com/2006/03/vulnerability-in-gmail.html

He wrote that he was trying to e-mail JavaScript code from a Yahoo Inc. account to a G-mail account. The code will run in a preview pane, he wrote. But if the code is mailed from one Gmail account to another, it is filtered out, he said.

posted by Fergie @ 3/02/2006 10:48:00 AM