Adam Fields says:
There's a Gmail exploit that allows an attacker to steal your Gmail cookie, which thereafter identifies them as you to the system, even if you change your password. This seems like a huge problem for Google, above and beyond the actual security breach. Remember that Gmail uses the same unlimited lifetime Google cookie. The data in that cookie is, presumably, extremely valuable for their tracking efforts, and I'd guess that this will be difficult for them to fix in a way that maintains that.
Luminifer writes:
The site's been updated with links to info about the exploit already being fixed – and also, the fact that the gmail cookie and the google cookie are two different cookies (doesn't the gmail cookie expire after 2 weeks, and then only if you check the 2 week box? I may be wrong on this one.).
link to the fix info
