+- Sinisterly (https://sinister.ly)
+-- Forum: General (https://sinister.ly/Forum-General)
+--- Forum: World News (https://sinister.ly/Forum-World-News)
+--- Thread: Gmail Security Vulnerability For Netflix Users (/Thread-Gmail-Security-Vulnerability-For-Netflix-Users)
Gmail Security Vulnerability For Netflix Users - mothered - 04-12-2018
Greetings Sinisterly,
Irrespective of security measures In place, vulnerabilities continue to exist In all entities.
Quote:Google's Gmail service contains a suspected security vulnerability that could be exploited by hackers and email scammers to compromise Netflix accounts and steal sensitive user information, a web developer has claimed.
In this case, I personally believe It's more so a poor configuration In both Gmail & Netflix for the following reasons.
Gmail:
Quote:The issue takes advantage of the fact Google has a “dots don’t matter” policy in how it processes email addresses. For example, it views “johnsmith@gmail” as being identical to “j.o.h.n.smith@Gmail.” To Netflix, on the other hand, both of those email addresses would be assigned to different accounts on its platform.
Netflix:
Quote:Netflix does not require users to verify their email addresses when they sign up
If both Gmail & Netflix were not configured as such, the vulnerability would not exist.
Source.