November 27, 2003
http://www.ghacks.net/2008/03/.....-archiver/
What would you do if you had purchased a software that would archive your Gmail mails and found out that this software send your username and password to the Gmail account of the author of the software ? That’s apparently what has happened to users who purchased the program G-Archiver by someone named John Terry.
Dustin Brooks reverse engineered the program and discovered the plain text username and password of the software developer. He was wondering why someone put his own mail information in the source code and discovered that the user’s username and password would be send to that Gmail account.
With the login credentials at hand he decided to investigate further and logged into the Gmail account of John Terry only to find out that the Inbox had 1777 messages each containing usernames and passwords of users of the software.
//Andreas
1 Guest(s)