funsec mailing list archives

Be aware: G-Archiver steals your Gmail credentials


From: Juha-Matti Laurio <juha-matti.laurio () netti fi>
Date: Mon, 17 Mar 2008 11:34:27 +0200 (EET)

This stuff is last week's stuff, but I believe that all readers are not aware.

"Coding Horror, a popular blog run by programmer Jeff Atwood, published allegations that a Windows shareware 
application for archiving Gmail messages called G-Archiver steals users' Gmail login details.

The allegations were made by Dustin Brooks, a .Net programmer with a database management company based in the Midwest.

In a phone interview, Brooks confirmed that he had used a programming analysis tool called Reflector to review the 
application's source code
and found that the program's author had hard-coded the e-mail address jterry79 () gmail com into the code, along with 
the password to the account."
--clip--

More at
http://www.informationweek.com/news/showArticle.jhtml?articleID=206902839

Original source:
A Question of Programming Ethics
http://www.codinghorror.com/blog/archives/001072.html

And
http://www.garchiver.com/what-happened.htm

"It is urgent that you remove the current version of G-Archiver from your computer, and change your Gmail account 
password right away."

Juha-Matti
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: