Comments on: Warning about Checking G-Mail RSS on Bloglines

By: Article Submission Service | Darren Chow

Article Submission Service | Darren Chow — Fri, 12 Jun 2009 06:15:40 +0000

I found your blog on google and read a few of your other posts. Very nice read.
Be reminded to continue to build back links for traffic and seo.

Darren.

By: Jamdo

Jamdo — Mon, 27 Feb 2006 03:28:50 +0000

Organising Online Partnerships

By: New Links

New Links — Fri, 20 May 2005 07:05:41 +0000

Hello

Hello alll and welcome to IluvNUFC’s round up of the best of the net this week. Sorry I was’nt here yeaterday but I was attending wor kid’s(mmChronic) wedding with Dogs. Not sure where the rest of the guys were though. Anyway lets start with some Star

By: Sponbustion Magazine » ILuvNUFC’s DinkLump

Sponbustion Magazine » ILuvNUFC’s DinkLump — Fri, 20 May 2005 06:55:39 +0000

[...] ff Photos of Brown Recluse Spider Bite. The future of Google, Apple, and Microsoft. Warning about Checking G-Mail RSS on Bloglines. Dom [...]

By: » Gmail, Bloglines e i feed RSS ..:digital||divide:..

» Gmail, Bloglines e i feed RSS ..:digital||divide:.. — Mon, 16 May 2005 08:54:23 +0000

[...] a nella vita quotidiana 16/5/2005 Gmail, Bloglines e i feed RSS Un articolo di Darren Rowse sta creando qualche scompiglio in giro [...]

By: athula

athula — Mon, 16 May 2005 08:50:23 +0000

to fred,

your testing may be valuable if you continue with it with a gmail a/c.

i can send you a gmail invitation if you can send me a email to athula2000@gmail.com

thanks

By: blogpraxis.de

blogpraxis.de — Sun, 15 May 2005 17:32:09 +0000

On Bloglines security: Preview Feed is evil also

Bloglines can be a tremendous helpful service, but there are many (esp. security) downsides not visible to the common user.

By: john Fuller

john Fuller — Sun, 15 May 2005 11:53:08 +0000

By the way, with the above example I was able to get the user name and password of the above accounts and enter the users gmail accounts.

By: john Fuller

john Fuller — Sun, 15 May 2005 11:46:14 +0000

You can also find more info on this at this website….

http://www.kbcafe.com/iBLOGthere4iM/?guid=20041117223055

By: blog.mazoo.net

blog.mazoo.net — Sun, 15 May 2005 11:14:50 +0000

! Rss Gmail

“Warning about Checking G-Mail RSS on Bloglines” , rss- . rss-, Bloglines, Gmail…

By: Is there a PC Doctor in the house? » Blog Archive » Another Gmail oddity

Sat, 14 May 2005 23:43:25 +0000

[...] ten – rather it was the headline of an email I’d sent – my ProBlogger Newsletter.” ProBlogger I just post on Gm [...]

By: James Arendt

James Arendt — Sat, 14 May 2005 22:59:10 +0000

I have a gmail account. I didn’t realize I had an atom feed. As far as I can tell, the gmail account holder has to provide a user/pass combo via to access their feed. I can only assume that users who are reading their inboxes via bloglines have set it up to automatically connect with their user/pass combo. I am not a bloglines user so this only speculation. Not that swift on those account holders parts for setting those feeds up in bloglines. It doesn’t just affect them, but the users who email them.

By: Fred On Something...

Fred On Something... — Sat, 14 May 2005 21:18:42 +0000

Do not use the Atom Gmail service with online aggregators like Bloglines

Do not use the Atom Gmail service with online aggregators like Bloglines There is a real security threat

By: Fred

Fred — Sat, 14 May 2005 19:32:52 +0000

Hello,

I talked too fast, you can have access to a SSL page with HTTP Auth on bloglines by using this trick:

https://USERNAME:PASSWORD@thewebsite.com/feed/rss/

Sorry,

Salutations,

Fred

By: Fred

Fred — Sat, 14 May 2005 19:08:36 +0000

Hello,

I’m surprised to read your post today. I just posted something regarding this subject:

http://radio.weblogs.com/0140770/2005/05/14.html#a137

I done some tests and if you are right, GMail only create a SSL channel… no authentication. What this mean? It means that the feed is encrypted for his transmission but anyone have access to it. The situation is strange but it look likes it. I tested bloglines on a feed using SSL, you can get it. I tested bloglines with a feed using HTTP Auth, he can’t get the feed. I can’t push my tests farthest because I do not have any GMail account but the problem seem real.

So, thank for this post, it put light on some of my interrogations.

Salutations,

Fred

By: Andy

Andy — Sat, 14 May 2005 17:33:47 +0000

You can set individual feeds to be ‘private’ even if the rest of your feeds are public. Alternatively, I presume you could set up two bloglines accounts, or use a different aggregator for that – then again if you are online (which you must be to get RSS updates) why not just check your mail in the usual fashion? Or am I missing something here…?

By: Duncan Riley

Duncan Riley — Sat, 14 May 2005 17:09:42 +0000

I didn’t even know that my Gmail account offered an RSS feed…..

By: fred

fred — Sat, 14 May 2005 16:41:54 +0000

I’m not quite sure why this should be a surprise. It’s an RSS feed to an inbox. Bloglines is a public aggregator. Users of Basecamp and other products face similar issues. It’s generally not a good idea to use a public aggregator to read private feeds.

By: Michael Moncur

Michael Moncur — Sat, 14 May 2005 16:09:17 +0000

Ooh, that’s nasty. Thanks for the heads up.

By: Barry Welford

Barry Welford — Sat, 14 May 2005 15:50:10 +0000

I imagine if you read your Gmail account via a subscription that you designate as private then there would be no publication of the RSS feed. However it looks a bit dodgy to me nevertheless.

BTW Darren, thanks for working around Spam Karma for me. Peace.