MetadataBug in Bloglines
Phil Ringnalda: What could it do? Well, steal your email address, change it and your password so you can’t get back in, or unsubscribe you from all your feeds and subscribe you to whatever the attacker prefers, send stuff to your Bloglines-blog, I didn’t try it all but I didn’t see anything that looked like even an attempt at securing anything that you can do by clicking on a link or filling out a form in the UI.
Dat klinkt vrij ernstig, niettemin heeft de Bloglines-crew -vier weken na melding- nog altijd niet de moeite genomen om deze bug te herstellen. Misschien niet onverstandig om even snel je Bloglines-feeds naar OPML [?] te exporteren.
