FYI...
Cross-Site (XSS) bug in GMail
- http://isc.sans.org/diary.php?storyid=1995
Last Updated: 2007-01-02 06:41:08 UTC
"Google starts into 2007 with a feature that allows bad guys to steal your GMail contacts list. http://blogs.zdnet.com/Google/ has more. But before you follow any links today, you should maybe make sure that you are not logged in on GMail..."
:fear:
