gmail security issue

The way I'm reading this is that if you always go directly to gmail vs. following a link from another (questionable or hacked) site, you're fine. Or can any site at all read the cookie file?
 
Is it any worse than clicking on some dodgy email that purports to be from your bank, and then fishes the username/password?

Also I'm wondering how the cookie would let people in even after you have logged in from somewhere else. That does need to be fixed.
 
You must log in or register to reply here.
Back
Top