A security flaw in email that might be worrisome, if more people were really smart

How a Google Headhunter’s E-Mail Unraveled a Massive Net
[Via Dave Winer’s linkblog feed]

How a Google Headhunter’s E-Mail Unraveled a Massive Net Security Hole.

[More]

What a cool story. Some phisher sent the wrong email to the wrong guy. The email looks like it is from Google but seems off. He spots what he thinks is an intentional but not easily found, flaw, supposing the Google is doing this on purpose to find outstanding people.

So he constructed a suitable reply to demonstrate the had found their trick. Except it turns out that it was not a trick and that many, many group have the exact smae security flaw.

Read it and worry. Not too much if you are careful with your links but still, a little.