Full Disclosure mailing list archives

Re: Google Accounts Security Vulnerability

From: coderman <coderman () gmail com>
Date: Fri, 18 May 2012 13:00:39 -0700

On Thu, May 17, 2012 at 5:51 AM, Mike Hearn <hearn () google com> wrote:

I understand your concerns, however they are not valid.


++

best thread on list all month. :)

now if only Google's two factor auth could use tamper resistant tokens.
 i trust my phone even less than my browser... :(

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread:

Re: Google Accounts Security Vulnerability, (continued)
- - - Re: Google Accounts Security Vulnerability Michael Gray (May 18)
    - Re: Google Accounts Security Vulnerability Dan Kaminsky (May 18)
    - Re: Google Accounts Security Vulnerability Thor (Hammer of God) (May 19)
    - Re: Google Accounts Security Vulnerability Ferenc Kovacs (May 20)
    - Re: Google Accounts Security Vulnerability Thor (Hammer of God) (May 20)
    - Re: Google Accounts Security Vulnerability Michael J. Gray (May 20)
    - Message not available
    - Re: Google Accounts Security Vulnerability Daniel Margolis (May 21)
    - Re: Google Accounts Security Vulnerability Jann Horn (May 21)
    - Re: Google Accounts Security Vulnerability Michael J. Gray (May 21)
    - Re: Google Accounts Security Vulnerability Kyle Creyts (May 22)
    - Re: Google Accounts Security Vulnerability coderman (May 18)
    - Re: Google Accounts Security Vulnerability Jeffrey Walton (May 18)
    - Re: Google Accounts Security Vulnerability Mike Hearn (May 20)
  - Re: Google Accounts Security Vulnerability Thor (Hammer of God) (May 17)