Madshrimps Forum Madness

Madshrimps Forum Madness (http://www.madshrimps.be/vbulletin/)
-   WebNews (http://www.madshrimps.be/vbulletin/f22/)
-   -   A Good Reason To Go Full-Time SSL For Gmail (http://www.madshrimps.be/vbulletin/f22/good-reason-go-full-time-ssl-gmail-57006/)

jmke 19th August 2008 18:26

A Good Reason To Go Full-Time SSL For Gmail
 
A tool that automatically steals IDs of non-encrypted sessions and breaks into Google Mail accounts has been presented at the Defcon hackers' conference in Las Vegas. Last week, Google introduced a new feature in Gmail that allows users to permanently switch on SSL and use it for every action involving Gmail, not just authentication. Users who did not turn it on now have a serious reason to do so, as Mike Perry, the reverse engineer from San Francisco who developed the tool, is planning to release it in two weeks.

http://www.hungry-hackers.com/2008/0...king-tool.html

wutske 20th August 2008 16:34

aha, now I know why they introduced an option to prevent you from signing in using the http protocol :) .

Kougar 21st August 2008 14:46

Here's a guide to hack Gmail Notifier to work with SSL Gmail. Without this Gmail Notifier does not work when the account is set to use SSL.

http://www.wikihow.com/Hack-Gmail-Notifier-to-Use-SSL

jmke 21st August 2008 14:49

use Google Talk Labs Edition, SSL notification working nicely :)

wutske 21st August 2008 18:49

Quote:

Originally Posted by Kougar (Post 222413)
Here's a guide to hack Gmail Notifier to work with SSL Gmail. Without this Gmail Notifier does not work when the account is set to use SSL.

http://www.wikihow.com/Hack-Gmail-Notifier-to-Use-SSL

official patch: http://mail.google.com/support/bin/a...py?answer=9429

Kougar 21st August 2008 19:24

Patch does the same thing. Just a little text editing in a hex editor, needed to change the URL... :) Nice they have a patch though, didn't spot it.


All times are GMT +1. The time now is 23:23.

Powered by vBulletin® - Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO