Comments on: Flaw turns Gmail into spamming machine

A "serious security flaw" in Google's e-mail client allows spammers to send thousands of bulk e-mails through the company's SMTP service, according to a recent report.

[Anon-Y-mous]

They must be running a server with some flawed M$ code somwehere on it. There is no way Google would have their own code that could be explotied in any way.

[Anon-Y-mous]

[s]They must have a server running M$ code because there is no way Google could have their system compromised if it was entirely their own code. They write perfect code. What has the world come to?[/s]

[Trerro]

"By exploiting a flaw in the way Google forwards messages, a spammer can send thousands of bulk e-mails through Google's SMTP service, bypassing both Google's 500-address limit on bulk e-mail."

So it bypasses both the addres limit and



and what? :P

[Trerro]

"By exploiting a flaw in the way Google forwards messages, a spammer can send thousands of bulk e-mails through Google's SMTP service, bypassing both Google's 500-address limit on bulk e-mail."

So it bypasses both the address limit and.

Uhhh... and what? :P

[mojojam]

Dang, they must have hired some microsoft programmers.

[stevenmusil]

Oops! oh the perils of being my own editor. Thanks for pointing out the omission. I meant to say that the flaw bypassed the identity fraud protections.

[bj1126]

Yeah this has been going on for a while. Google has basically said they are doing nothing wrong but man is it getting annoying.

[rcrusoe]

Is this the first major Google goof? It will be interesting to see how fast they can respond to this. The fact that a lot of schools and a growing number of companies are using Google Apps is a big incentive to jump on this.

[someguy999]

The irony that this comes on the same time as news.com is trumpeting how "Google gains on Microsoft with hosted security offering" If anyone wondered about why there is skepticism about security appliances in the cloud... this is it.

[happyguy77]

Wow, Google really set up a nice spamming tool then. As-is, Gmail already screws with email headers on outbound GMail messages, so if a spammer sends spam from a GMail address there's no way to track them back to their IP address. Thanks, Google!

[benjaminstraight]

Boo!