<?xml version="1.0" encoding="utf-8"?>
<feed xml:lang="en-us" xmlns="http://www.w3.org/2005/Atom"><title>Simon Willison's Weblog: domainsecurity</title><link href="http://simonwillison.net/" rel="alternate"/><link href="http://simonwillison.net/tags/domainsecurity.atom" rel="self"/><id>http://simonwillison.net/</id><updated>2007-01-14T13:36:59+00:00</updated><author><name>Simon Willison</name></author><entry><title>Details of Google's Latest Security Hole</title><link href="https://simonwillison.net/2007/Jan/14/google/#atom-tag" rel="alternate"/><published>2007-01-14T13:36:59+00:00</published><updated>2007-01-14T13:36:59+00:00</updated><id>https://simonwillison.net/2007/Jan/14/google/#atom-tag</id><summary type="html">
    
&lt;p&gt;&lt;strong&gt;&lt;a href="http://blog.outer-court.com/archive/2007-01-14-n21.html"&gt;Details of Google&amp;#x27;s Latest Security Hole&lt;/a&gt;&lt;/strong&gt;&lt;/p&gt;
For a brief while you could use Blogger Custom Domains to point a Google subdomain at your own content, letting you hijack Google cookies and steal accounts for any Google services.


    &lt;p&gt;Tags: &lt;a href="https://simonwillison.net/tags/domains"&gt;domains&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/domainsecurity"&gt;domainsecurity&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/google"&gt;google&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/security"&gt;security&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/xss"&gt;xss&lt;/a&gt;&lt;/p&gt;



</summary><category term="domains"/><category term="domainsecurity"/><category term="google"/><category term="security"/><category term="xss"/></entry></feed>