A tool that automatically steals IDs of non-encrypted sessions and breaks into Google Mail accounts has been presented at the Defcon hackers’ conference in Las Vegas.

Last week Google introduced a new feature in Gmail that allows users to permanently switch on SSL and use it for every action involving Gmail, and not only, authentication. Users who did not turn it on now have a serious reason to do so as Mike Perry, the reverse engineer from San Francisco who developed the tool is planning to release it in two weeks.

Read more

Source: Hacking Truths

For more info visit Mike Perry’s site.

Protect your Gmail account

When you log in to Gmail, unless you maintain SSL for the whole session you are insecure. To keep your Gmail account secure follow these simple steps:

1. Log in to your Gmail account
2. Click on the ‘Settings’ link in the upper right corner next to your email address.
3. At the bottom of this page under ‘General’ tab, Google has added a new ‘Browser Connection’ feature - click on ‘Always use https’

That’s all you have to do…

Read more - Enabling the HTTPS setting

Tags: Gmail, SSL, protect Gmail, Mike Perry









Sphere: Related Content