Because Google isn't interested in money like Micro$oft is. Google is a great company and they excel above others in the same industry... Yahoo for example.

Gmail isn't basic. If it was basic, then someone else would have already created it. Google has rocket scientists and neurosurgeons working for them so I think great care was put into designing the Gmail service. This was just one little security flaw that got overlooked somehow. One security flaw is better than 100.

M$ is already hated because of the terrible job of security on Window$. M$ is more intrested in a GUI than system security so lots of people have posts against the company. I switched over to Linux for this reason, but since not all of my favorite software works in Linux, I'm stuck using both for a long time...

M$ wants all the money it can get. Google could actually care less about money. Mr. Page and Mr. Brin started the company as a search engine. The ads were only to keep it running because there are bills to pay. That's how Google operates to this day.

[N]F

well good they fixed that, but I don't know what made them make the mistake in the first place, it is one of the worst mistakes you could make

Well I believe thats somewhat true, but google needs money. They dont charge for everything like microsoft but for instance, they charge big time for decent advertising among other things.

lol I don't believe he was looking for an exploit.....it just happened...and it seemed like it was pretty obvious....if he had any visual indication that the code output, he would see it right in front of him (ie he wouldn't have had to have been looking for anything). Thats the only reason that this case isnt very special. It can happen to anyone, could happen to a 10 year old if they tried it. It would be a lot harder for a 14 year old looking for exploits to find them. And to be completely honest this is such a simple problem to spot, I cant believe it wasn't found out before =p (but then again I don't know that many people that try and send direct javascript code through email lol)
I switched over to Linux for this reason, but since not all of my favorite software works in Linux, I'm stuck using both for a long time..."
My friend told me he found an os called "linspire" thats like windows and linux..i don't know anything about it, but it might be worth it to check out =]
BTW no offense is intended if anyone takes any, i just got off a political debate forum and im a little stirred up =]
~Adio

Ok so google is keeping information on its users, I'll admit a bit creepy but honestly how do you expect them to be able to give good search results without collecting information and then using it to do massive cross referencing to be able to get more accurate results. As for the information that they get from the emails that are on their server...um reality check...do you honestly beleive that they are the only ones that are doing that?

Any email server has the right to do with the information on their server pretty much as they wish. From what I've read on the web at different points, the asumption of privacy on public email servers is not really backed up by law. If you want a private email server then pay for it or run it yourself.

Personally I don't put anything into an email that I honestly don't want the general public knowing about. As for privacy in email...I hope you don't send anything you don't want your employer know about from work or visit sites you don't want your employer knowing you are visiting on work time because any information sent across their network is theirs to view/record/archeive as they see fit.

The same premous protects google, its their network and all information on it is theirs to do with as they see fit.

I have to side-track here and agree with Captain Ron.

When Microsoft do something bad, they make it like they've just destroyed the world, but when Apple, Sony, whoever they may compete with, do it, then they all defend them and laugh in good taste...


Sorry to go off topic...

Lol, that 14 year old kid is a friend of mine . He told me in the morning after it, i was laughing on the floor that google looked over such a stupid flaw

I have been pretty happy with my gmail account and i have never had a problem with scripts executing. I hope they fix this soon because i have alot of work stuff on that.

Oh, don't worry about that. I believe that this has been fixed one day after it had been discovered. After all, that is Google

That's just plain naiveness of you! Of course Google cares about money. They are just smart enough to believe that more money will flow through satisfied users. What I mean is, that while MS is using vendor lock-ins and other dirty corporate trickery, Google are just creating good products.

I am at a constant fear that Google will go bankrupt in the future because of this belief of theirs. I mean, as much as they're trying to do good, MS is using said corporate bullshit to lull users into buying more things from them, and the big G is already entering a monopolized world, and even though they successfuly penetrated it, it's going to be a tough time for them to maintain that position. Just look at the progressive genre of music - it's great, complex, endearing music, but it's losing out to corporate pop (which I have nothing against).

Of course Google care about money. And yes, I'm sure there are some high-ranking Googleplexers that are greedy for a higher pay-check - but they're just being smart about their customer service.

i dont know why this was revived about according to the post much much above that this flaw have been long patched..

meaning this no longer worked.. perhaps just a flow in there ajax that causes the system to execute the scripts/..