Gmail Security Hole

[Ray!]

An interesting article for those of you who are gmail users: http://www.technologyreview.com/blog/mimssbits/27863/?p1=blogs.

Cheers

Ray

[ReefMagnet]

How dumb would you have to be to fall for that? I'm not sold on that story. My gmail account won't let me log in from a computer I haven't used before unless I verify at the same time with an SMS code so I would guess this means with this set up the bad guys would need two separate codes - one to retrieve the password and then one to log on to the account.

[Ray!]

I don't use gmail, so I have no idea how it works, but many do, so thought I'd post this up as a notice of shit that may happen.

Cheers

Ray

[ReefMagnet]

They only introduced the whole verification for a new computer thing a little while ago. Maybe this was the reason they did it

[cravenhaven]

I think the big problem here is if you lose your smartphone (or someone nicks it). You probably have it synching your mail with your gmail account, and now they have your gmail username, AND your phone for the SMS part of it.