Google Blogoscoped

Forum

More Google Authentication Flaws  (View post)

Ashman [PersonRank 4]

Wednesday, March 8, 2006
14 years ago

Now I'm afraid.

Wish this wasn't posted. Now people are going to try this.

Philipp Lenssen [PersonRank 10]

14 years ago #

You cannot actively hack this – you can only actively allow this bug to happen. In other words, by knowing about the "auth" parameter you can prevent sending it to others.

Ashman [PersonRank 4]

14 years ago #

So how do I prevent such a mishap?

Splasho [PersonRank 10]

14 years ago #

Don't post your URL with an ?auth in it

Philipp Lenssen [PersonRank 10]

14 years ago #

If all you do is use Google Page Creator nothing can happen. But if you ever want to send someone else a web address from Google (e.g. to point your friend to Google Page Creator), make sure you remove the "auth" parameter from the URL. If you see this in other Google applications, remove it as well. Also, if you share your PC with others make sure you clear your browsing history, cookies and so on.

This thread is locked as it's old... but you can create a new thread in the forum. 

Forum home

Advertisement

 
Blog  |  Forum     more >> Archive | Feed | Google's blogs | About
Advertisement

 

This site unofficially covers Google™ and more with some rights reserved. Join our forum!