Open Source News » Slashdot: IT » Gravatars Can Leak Users' Email Addresses

Feeds

34717 items (30204 unread) in 5 feeds

OpenSource (5765 unread)

• SourceForge.net: Front page news (802 unread)
• Slashdot: IT (4963 unread)

Security (11361 unread)

• Digg / Security (11361 unread)

Linux (13078 unread)

• digg / Linux/Unix (11418 unread)
• Slashdot: Linux (1660 unread)

Slashdot: IT

• 

  Gravatars Can Leak Users' Email Addresses

  Posted: December 16th, 2009, 6:20am CET by kdawson

  Tags:  security  

  abell writes "Gravatar offers a global avatar service, using an MD5 hash of the user's email as avatar ID. This piece of information in some cases is enough to retrieve the original email address. Testing a simple attack on stackoverflow.com, I was able to determine the email addresses of more than 10% of the site's users."

  Read more of this story at Slashdot.