Gmail account contacts were stolen in a CSRF attack (combined with another vulnerability). This type of attack is often overlooked, but it&#x27;s very real.<p><a href="http:&#x2F;&#x2F;archive.oreilly.com&#x2F;pub&#x2F;post&#x2F;gmail_exploit_contact_list_hij.html" rel="nofollow">http:&#x2F;&#x2F;archive.oreilly.com&#x2F;pub&#x2F;post&#x2F;gmail_exploit_contact_li...</a>