4 ms·
Good to know they are monitoring the User-Agent header for security. A Chrome user changes her User-Agent header in Developer Tools, logs in to Gmail and finds
by 3xblah 7y ago
Good to know they are monitoring the User-Agent header for security.
A Chrome user changes her User-Agent header in Developer Tools, logs in to Gmail and finds that Google has sent her a "Security alert" e-mail message that a "new device" has logged into her account.
Maybe the e-mail should inform her that Google has stored a new device fingerprint (https://en.wikipedia.org/wiki/Device_fingerprint https://en.wikipedia.org/wiki/Device_fingerprint) and the ways in which Google can use it are not limited to "security". It will be used to further Google's business, online advertising services.
Sure, Google can argue these fingerprints will be used for "security purposes" and are not being gathered for online advertising services, but what are the real risks to Google of "less-than-perfect" Gmail security.
With over 60% of webmail users on Gmail how easy would it be for a user to protest Gmail insecurity by moving to a competitor, one who would not also be taking fingerprints.