Submission + - GMail Vulnerable To Contact List Hijacking
Anonymous Coward writes: "By simply logging in to GMail and visiting a website, a malicious website can steal your contact list, and all their details. The problem occurs because Google stores the contact list data in a javascript file which can be found here. So far the attack only works on Firefox, and doesn't appear to work in Opera or Internet explorer 7. IE6 was un-tested as of now."