Google Groups are apparently being hacked en masse

2011-11-23 Thread Jim Douglas
Over the past few days, I've noticed that more and more peoples'
profiles are showing cross-posting of their legitimate messages to
various unsavoury forums.  This doesn't appear to indicate that
accounts have been compromised (i.e. passwords hacked); it looks more
like someone has found a way to hack Google Groups to copy legitmate
posts to different groups, while making it appear that they came from
the original author.  I'm now seeing this (extremely disconcerting)
activity on my own account See:

http://www.launch.is/blog/google-groups-hacked-posts-appear-in-porn-group-with-seo-key.html

http://groups.google.com/group/google-appengine/browse_thread/thread/fb06574b6ed8b726#

-- 
You received this message because you are subscribed to the Google Groups 
Google Web Toolkit group.
To post to this group, send email to google-web-toolkit@googlegroups.com.
To unsubscribe from this group, send email to 
google-web-toolkit+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-web-toolkit?hl=en.



Re: Google Groups are apparently being hacked en masse

2011-11-23 Thread David Chandler
Hi Jim,

The Groups team has been notified.

Thanks for the report!

/dmc

On Wed, Nov 23, 2011 at 1:26 PM, Jim Douglas jdou...@basis.com wrote:

 Over the past few days, I've noticed that more and more peoples'
 profiles are showing cross-posting of their legitimate messages to
 various unsavoury forums.  This doesn't appear to indicate that
 accounts have been compromised (i.e. passwords hacked); it looks more
 like someone has found a way to hack Google Groups to copy legitmate
 posts to different groups, while making it appear that they came from
 the original author.  I'm now seeing this (extremely disconcerting)
 activity on my own account See:


 http://www.launch.is/blog/google-groups-hacked-posts-appear-in-porn-group-with-seo-key.html


 http://groups.google.com/group/google-appengine/browse_thread/thread/fb06574b6ed8b726#

 --
 You received this message because you are subscribed to the Google Groups
 Google Web Toolkit group.
 To post to this group, send email to google-web-toolkit@googlegroups.com.
 To unsubscribe from this group, send email to
 google-web-toolkit+unsubscr...@googlegroups.com.
 For more options, visit this group at
 http://groups.google.com/group/google-web-toolkit?hl=en.




-- 
David Chandler
Developer Programs Engineer
w: http://code.google.com/
b: http://turbomanage.wordpress.com/
t: @googledevtools

-- 
You received this message because you are subscribed to the Google Groups 
Google Web Toolkit group.
To post to this group, send email to google-web-toolkit@googlegroups.com.
To unsubscribe from this group, send email to 
google-web-toolkit+unsubscr...@googlegroups.com.
For more options, visit this group at 
http://groups.google.com/group/google-web-toolkit?hl=en.