Someone needs to verify this – but from where I sit, it’s reality!
Some one visits my blog from a link on their personal iGoogle Page. That gives me a link back to their iGoogle. I click that link, and I get someone else’s personal iGoogle page.
For example, I just tried this on a hit from India, and all of the links on the iGoogle page were to Indian sites. Definitely NOT my iGoogle site (I have one, I just don’t use it).
So is this a security hole? I can’t see GMail, or other services that require an iGoogle login – but I can see what widgets and RSS feeds the person subscribes to. Is that a security breach?
I guess it depends on what you subscribe to.
Wondering if anyone can validate what I am seeing?