GMail Hack

benjaminc · 11 Aug 2004, 12:50 PM

Check this out:

http://www.webpronews.com/enterprise...inghacked.html

Sorry if it has been posted elsewhere.

Camille · 11 Aug 2004, 04:01 PM

Quite scary,

Quote:

The only information you need to be able to crack a users account is their username (the first part of their @gmail.com address).

I do hope Gmail is doing something to protect their users.

Camille

teacher · 11 Aug 2004, 06:44 PM

I think it is wise to remember that all accounts could be subjected to cracking.

Killer · 11 Aug 2004, 07:55 PM

From the article, it seems that Gmail are doing something to stop those "cracks". At least their responses are fast.

Camille · 11 Aug 2004, 10:43 PM

I find this a concern because the developer, AusPhreak, managed to come up with a program that,

Quote:

windows based application that requires no technical knowledge to use

and it is good that Gmail is taking steps to counter AusPhreak's software but I'm also concerned as to the developer's response,

Quote:

"we will try and get around any future security they put in place"

Camille

Killer · 11 Aug 2004, 11:41 PM

Quote:

Originally posted by Camille
and it is good that Gmail is taking steps to counter AusPhreak's software but I'm also concerned as to the developer's response,

Camille

You can be sure those troublemakers won't stop here.

neilj · 12 Aug 2004, 12:42 AM

I wouldn't be too worried. All the program does is a dictionary attack on your password. Providing you have a reasonably strong password (i.e. letters and numbers, not just a word out of the dictionary, and preferably at least 10 characters long) there is no way it will ever work on your account. I mean there are 36 numbers and letters (and to make it even more secure you could use upper case and symbols as well). Now suppose you have a 10 character password - there are 3656158440062976 different combinations. Now suppose it takes half a second to try each password and your password is found after trying only half the possible combinations the resulting time is 29063632 years. I think you can relax for now...

Neil

elliotng · 12 Aug 2004, 04:41 AM

it looks similar to brute force cracking, shouldn't be too hard for gmail to block this vulnerability

theecigarman · 12 Aug 2004, 03:32 PM

Thanks for the warning. When I get my account I will definately use a powerful password.

TedCavitt · 13 Aug 2004, 10:37 AM

Any decent email provider will lock your account down after several failed attempts, like Fastmail does.

SusanUKF · 13 Aug 2004, 10:40 AM

This is maybe why all but one of my photographs disappeared from my GMail account and why certain emails from my account (and other forum member's accounts) have gone missing!!!!

Thanks for telling us, it is not very encourageing though!!

Susan.

Killer · 13 Aug 2004, 10:50 AM

Quote:

Originally posted by SusanUKF
This is maybe why all but one of my photographs disappeared from my GMail account and why certain emails from my account (and other forum member's accounts) have gone missing!!!!

Thanks for telling us, it is not very encourageing though!!

Susan.

Susan, I think your disapperaing stuffs has something to do with the bugs then being hacked.

SusanUKF · 13 Aug 2004, 10:52 AM

Quote:

Originally posted by Killer
Susan, I think your disapperaing stuffs has something to do with the bugs then being hacked.

Great! I got a double-whammy!!

Susan.

11 Aug 2004, 12:50 PM	#1
benjaminc Member Join Date: Jul 2004 Location: USA Posts: 91	GMail Hack Check this out: http://www.webpronews.com/enterprise...inghacked.html Sorry if it has been posted elsewhere.

11 Aug 2004, 06:44 PM	#3
teacher Master of the @ Join Date: Feb 2003 Location: UK Posts: 1,167	I think it is wise to remember that all accounts could be subjected to cracking.

11 Aug 2004, 07:55 PM	#4
Killer Intergalactic Postmaster Join Date: Nov 2000 Location: Singapore Posts: 6,762 Representative of: Killer.kkk.sg	From the article, it seems that Gmail are doing something to stop those "cracks". At least their responses are fast.

12 Aug 2004, 12:42 AM	#7
neilj Cornerstone of the Community Join Date: Apr 2004 Location: Melbourne Posts: 971 Representative of: Fastmail.fm	I wouldn't be too worried. All the program does is a dictionary attack on your password. Providing you have a reasonably strong password (i.e. letters and numbers, not just a word out of the dictionary, and preferably at least 10 characters long) there is no way it will ever work on your account. I mean there are 36 numbers and letters (and to make it even more secure you could use upper case and symbols as well). Now suppose you have a 10 character password - there are 3656158440062976 different combinations. Now suppose it takes half a second to try each password and your password is found after trying only half the possible combinations the resulting time is 29063632 years. I think you can relax for now... Neil

12 Aug 2004, 04:41 AM	#8
elliotng Junior Member Join Date: Jul 2004 Posts: 14	it looks similar to brute force cracking, shouldn't be too hard for gmail to block this vulnerability

12 Aug 2004, 03:32 PM	#9
theecigarman Junior Member Join Date: Aug 2004 Posts: 5	Thanks for the warning. When I get my account I will definately use a powerful password.

13 Aug 2004, 10:37 AM	#10
TedCavitt Senior Member Join Date: Aug 2003 Posts: 141	Any decent email provider will lock your account down after several failed attempts, like Fastmail does.

13 Aug 2004, 10:40 AM	#11
SusanUKF Intergalactic Postmaster Join Date: Oct 2003 Location: Canada Posts: 5,428	This is maybe why all but one of my photographs disappeared from my GMail account and why certain emails from my account (and other forum member's accounts) have gone missing!!!! Thanks for telling us, it is not very encourageing though!! Susan.