Google Account Security Breach with Book Search

Philipp Lenssen reports a Google Book Search Security Hole where someone can login to your Google account if they get access, somehow, to your URL string of your Google Book search result page. This is how it works; a person goes to book.google.com does a special search, clicks on a result, logs in and then copies the URL and sends it off to a friend. When the friend gets the URL and clicks on it, it should login the friend to Google as the person who sent the link, giving the friend access to Google Account information that is not his.

Want SEW higher in your Google results?Add as a preferred source

More in Industry

View more
Industry

Google Hack Gets At Personal Data

Philipp Lenssen has discovered a hack to Google's XSS that allows access to personal data, according to Blogoscoped today. The tests he used with co-editor Tony Ruscoe show…

Industry

Search Headlines & Links: July 30, 2007

Want a snapshot of the day's search marketing news? Here we've collected today's top news stories posted to the Search Engine Watch Blog, along with search-related headlines from…