A tool that automatically steals IDs of non-encrypted sessions and breaks into Google Mail accounts has been presented at the Defcon hackers’ conference in Las Vegas.
Last week Google introduced a new feature in Gmail that allows users to permanently switch on SSL and use it for every action involving Gmail, and not only, authentication. Users who did not turn it on now have a serious reason to do so as Mike Perry, the reverse engineer from San Francisco who developed the tool is planning to release it in two weeks.
When you log in to Gmail the website sends a cookie (a text file) containing your session ID to the browser. This file makes it possible for the website to know that you are authenticated and keep you logged in for two weeks, unless you manually hit the sign out button. When you hit sign out this cookie is cleared.
Even though when you log in, Gmail forces the authentication over SSL (Secure Socket Layer), you are not secure because it reverts back to a regular unencrypted connection after the authentication is done. According to Google this behavior was chosen because of low-bandwidth users, as SLL connections are slower.
The problem lies with the fact that every time you access anything on Gmail, even an image, your browser also sends your cookie to the website. This makes it possible for an attacker sniffing traffic on the network to insert an image served from http://mail.google.com and force your browser to send the cookie file, thus getting your session ID. Once this happens the attacker can log in to the account without the need of a password. People checking their e-mail from public wireless hotspots are obviously more likely to get attacked than the ones using secure wired networks.
Perry mentioned that he notified Google about this situation over a year ago and even though eventually it made this option available, he is not happy with the lack of information. “Google did not explain why using this new feature was so important” he said. He continued and explained the implications of not informing the users, “This gives people who routinely log in to Gmail beginning with an https:// session a false sense of security, because they think they’re secure but they’re really not.”
If you are logging in to your Gmail account from different locations and you would like to benefit from this option only when you are using unsecured networks, you can force it by manually typing https://mail.google.com before you log in. This will access the SSL version of Gmail and it will be persistent over your entire session and not only during authentication.
Copied for help from another site
YouTube - Windows Vista and Windows Live
Well I was surfing YouTube Videos I found this one 
.
She speaks how Windows Vista and Windows Live made her life better
.
Windows Vista and Windows Live in somebody’s life
Hope you enjoy it 
C U
Understanding Windows Vista Aero Glass Requirements
The Windows Vista Aero Glass interface is one of the major changes in the newest version of windows. What is less clear for most people is what conditions have to be met for Aero to be enabled. If you are sure your system meets the requirements but it’s still not enabled, Here’s a list of conditions.
- Your graphics card should support DirectX 9. Most decent cards already do.
- The graphics card must support Pixel Shader 2.0 in hardware. This is the critical piece that you will have to check with your graphics card manufacturer. If you have a newer ATI or NVIDIA card, you should be good.
- The driver must be written specifically for Windows Vista. You’ll be able to see that your graphics card driver is a Windows Vista Display Driver Model (WDDM) driver by looking at the adapter type in device manager:
- The system must be set to 32 bits per pixel. If you are running at a different color depth, this could be the reason why your system doesn’t have Aero enabled.
- The primary monitor refresh rate must be set to at least 10hz. Why you’d have it set to less, I have no clue.
- You must have a graphics card with at least 64MB of RAM in it, although I’d suggest a card with more memory. If you have a lower memory graphics card, you may have to decrease the resolution to enable Aero.
- Your system must have at least 512mb of available RAM. I’d suggest using at least 1GB of RAM in your computer, and preferably even more.
- Aero will not work on Windows Vista Basic edition. For best results, get the Ultimate version.
If you meet all of the conditions and Aero still isn’t enabled, you can manually enable Aero by right-clicking on the desktop, clicking Personalize, and clicking Window Color and Appearance.
You should see Windows Aero in the list. Click that, and hopefully Aero will now be enabled.
This is copied from another site just for help
My all new website , only for me ^_^ !!!
Hi !
Today is something else but tech,it’s about me and this blog.
I’ve been away from this blog but I didn’t stop writing,I’m currently and the most of the time on my blog on my website.
It’s better for me to write on my website and make it poular,but I steel love this blog,I’ve got great memories with it , so I’m not deleting it, but if I don’t write here so long, go and visit my website and you’re going to find the news for sure.
Thanks and here is my website : http://www.emogirl72.webs.com .
See ya
Bypass Gmail’s Spam Filter
If you wanted a way to bypass Gmail’s spam filter, now it’s possible. Just create a filter that describes the cases when Gmail should not flag the incoming messages as spam and then check “Never send it to spam”. To bypass the filter for all the messages flagged as spam, type label:spam in the “Has the words” input box.
I intended to use the new option for my secondary Gmail accounts that automatically forward messages to my main account, but it doesn’t seem to work. Until now, the spam messages were not forwarded and I didn’t receive many important messages that were mistakenly flagged as spam. Since I can’t bypass the spam filter and forward the messages to a different account, another idea would be to use Gmail’s mail fetcher for my main account and download the messages from the secondary accounts.
There’s one situation that doesn’t require to set up a filter: if the messages from certain senders are constantly flagged as spam and they shouldn’t be, just add them to your contacts list.
copied from : here
Zimbra From Yahoo!
Today I found out this new amazing service called ” Zimbra” from Yahoo! (
Not really a service as much as it’s a company
).
It gives you an amazing offers including one that sounds just like AOL
desktop ,it’s called Zimbra Desktop ,it supports e-mail ,calendar and contacts 
.
To get started : here . To see an overview : here .
See ya
Happy 1 year with Yahoo !
Hi !
Today I’m closing my 1st year with Yahoo! and I’m so happy about that.
I love Yahoo! with all of its services
.
Have a great day.
How to set up E-mail accounts on the new iPhone and iPod touch
I found this amazing videos on YouTube,you should watch them :
Firefox 3 & Y!Mail make changing your default client easy!
For everyone out there who has been longing for an easier way to set Yahoo! Mail as your default email client I have some delightful news. With the much ballyhooed recent debut of Firefox 3, as well as some recent updates to All-New Mail, it’s never been easier.
Some of our savvier Windows users have been able to follow a rather simple (but somewhat tedious) process for some time now, and our Mac users have been totally left out (the sad price we pay for being tragically hip), but now everyone can join in on the fun with just a couple steps.
One of the big additions to FF3 is the Applications section of the Options/Preferences menu. There you can designate how just about any type of link will behave when you click on it. Just look for “mailto” under Content Type and select “Use Yahoo! Mail”.
The list of content types is pretty long, so they’ve also provided a handy Search field to narrow your results.
Now if you happen to be a bit phobic when it comes to digging around your Options/Preferences, All-New Mail has an awesome alternative.
Recently added to the Options drop-down is an entry for “Set Y! Mail as my default webmail”. Doing so will switch your “mailto” action from whatever it was to “Always Ask”.
The next time you click on a “mailto” link you will get a handy pop-up asking you to pick your email client, and giving you the choice to make that selection permanent. Settings changed and you never had to navigate your Options/Prefs.
If you haven’t tried Firefox 3 you can download it from the Mozilla website. Most of you should already see that new choice in your Options menu, but if not you should have it in the next week or so.
Ryan Knight
Community Manager
Yahoo! Mail
✿ εмσ ρяιηcεss ✿
