Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: Gmail anomaly
From: "Paulo Pereira" <pjp () paulo-pereira net>
Date: Fri, 19 Nov 2004 01:33:08 -0800 (PST)

Micheal,

you can use the "Web Developer Extension" to delete domain cookies
whenever you want.

Paulo Pereira


<quote who="Micheal Espinola Jr">
Yep, something is awry with Firefox's cookie management.  it pisses me
off.  I disconnect from a site (close the browser), but the next time
I open FF,  all my cookies are acting as if they are still live.

The Maxthon add-on for IE does the same thing

Its annoying as hell when you are testing web apps.


On Thu, 18 Nov 2004 16:33:07 -0800, ifconfig_xl0 <intxl0 () gmail com> wrote:
This is not a security risk but a weirdness worth noting. I reported
it as a bug to gmail but im not sure if its a bug on their part it may
be firefox not doing something right.

If you open  two gmail accounts in two different firebird/fox browsers
the first account logged into after a refresh becomes the second
acccount. Or if you send an e-mail with the second account, it may
send as the first and refresh back as account1.

So if you login with GmailAccount1 and then open another browser and
log into GA2, go back to GA1 browser and hit refresh, GA1 will be in
the mailbox of GA2.

This obviously is not a security risk because the mailbox was already
logged into, but I still thought it was a weird thing to do. It doesnt
act that way with internet exploder though so it must be something
with Firefox ...

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html



--
ME2

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html



-- 
Paulo Jorge Pereira
IP Network Engineering, CCIE 6372


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]