Full Disclosure mailing list archives

Re: Google Accounts Security Vulnerability

From: Jeffrey Walton <noloader () gmail com>
Date: Fri, 18 May 2012 19:58:55 -0400

On Fri, May 18, 2012 at 4:00 PM, coderman <coderman () gmail com> wrote:

On Thu, May 17, 2012 at 5:51 AM, Mike Hearn <hearn () google com> wrote:

I understand your concerns, however they are not valid.


best thread on list all month. :)

now if only Google's two factor auth could use tamper resistant tokens.
 i trust my phone even less than my browser... :(

"Two-channel breached: a milestone in threat evaluation, and a floor
on monetary value,"
http://financialcryptography.com/mt/archives/001349.html.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

Re: Google Accounts Security Vulnerability, (continued)
- - - Re: Google Accounts Security Vulnerability Dan Kaminsky (May 18)
    - Re: Google Accounts Security Vulnerability Thor (Hammer of God) (May 19)
    - Re: Google Accounts Security Vulnerability Ferenc Kovacs (May 20)
    - Re: Google Accounts Security Vulnerability Thor (Hammer of God) (May 20)
    - Re: Google Accounts Security Vulnerability Michael J. Gray (May 20)
    - Message not available
    - Re: Google Accounts Security Vulnerability Daniel Margolis (May 21)
    - Re: Google Accounts Security Vulnerability Jann Horn (May 21)
    - Re: Google Accounts Security Vulnerability Michael J. Gray (May 21)
    - Re: Google Accounts Security Vulnerability Kyle Creyts (May 22)
    - Re: Google Accounts Security Vulnerability coderman (May 18)
    - Re: Google Accounts Security Vulnerability Jeffrey Walton (May 18)
    - Re: Google Accounts Security Vulnerability Mike Hearn (May 20)
  - Re: Google Accounts Security Vulnerability Thor (Hammer of God) (May 17)