Jump to content

Gmail exploit reveals users' names


Recommended Posts

Ever wondered what name is behind some obscure gmail address? Maybe your preferred gmail address was taken and you’re wondering who took it?

Here’s a cute vulnerability in the gmail system that comes from the strong tie-ins between gmail, the google calendar and all the other services.

 

How to do it:

 

- Go to the ’share this calendar’ tab

 

- Enter the email address in the ‘person’ box

 

- Click ‘add person’ and ’save’

 

- When you return to this screen you will see the first and last name along with the gmail address

 

Verified- it works. This is a rather nasty thing to have circulating the net. Not that I care- my Gmail address includes my name anyway, but if it didn't I would be royal pissed right now.

 

 

Source: http://blogs.securiteam.com/index.php/archives/1113

Link to comment
Share on other sites

Ever wondered what name is behind some obscure gmail address? Maybe your preferred gmail address was taken and you’re wondering who took it?

Here’s a cute vulnerability in the gmail system that comes from the strong tie-ins between gmail, the google calendar and all the other services.

 

How to do it:

 

- Go to the ’share this calendar’ tab

 

- Enter the email address in the ‘person’ box

 

- Click ‘add person’ and ’save’

 

- When you return to this screen you will see the first and last name along with the gmail address

 

Verified- it works. This is a rather nasty thing to have circulating the net. Not that I care- my Gmail address includes my name anyway, but if it didn't I would be royal pissed right now.

 

 

Source: http://blogs.securiteam.com/index.php/archives/1113

 

You mean, it doesn't include it, right? Mine neither.

Link to comment
Share on other sites

I think he meant his name was in the address. I'm not all too concerned about someone knowing my name, really.

 

Well that doesn't sound right to me, if his name is included in the address, then the person doing the procedure above would find it out. If his name isn't included in his address then adding him will reveal nothing. Correct my logic, it's 8 AM after a sleepless night.

Link to comment
Share on other sites

I think he meant his name was in the address. I'm not all too concerned about someone knowing my name, really.

 

Well that doesn't sound right to me, if his name is included in the address, then the person doing the procedure above would find it out. If his name isn't included in his address then adding him will reveal nothing. Correct my logic, it's 8 AM after a sleepless night.

His name is already in his address, so he doesn't care that someone can use this exploit to find out what it is.

Link to comment
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
×
×
  • Create New...