Recommended Posts

Nothing happens when clicking "Check for new email" and no new emails are indicated on the Taskbar icon even when new ones are sitting in my Gmail inbox. Everything else seems to work. I've uninstalled/reinstalled several times without change. Any ideas?

W7U 32

Warning! This has major security issue (using Chromium at least).

When you right click the Gmail Notifier Plus icon in Task bar, and choose for instance Go to your inbox, the program tries to open following url:

https://www.google.com/accounts/ServiceLoginAuth?continue=http://mail.google.com/mail/%23inbox&service=mail&Email=USERNAME&Passwd=YOURPASSWORDINPLAINTEXT&null=Sign+in

1.) The worst thing is that your password is saved to Browser History as plain text!

2.) It does not log in, it should not redirect to that page in the first place... that page gives me Log in prompt regardless were you logged in from the browser already.

Proposed fix:

1.) If only one account is in the defaults, go to URL http://mail.google.com/mail/ instead of auth URL.

2.) Regardless how you fix this, get rid of the password in URL.

Warning! This has major security issue (using Chromium at least).

When you right click the Gmail Notifier Plus icon in Task bar, and choose for instance Go to your inbox, the program tries to open following url:

This is really bad and needs to be fixed asap. At least Google doesn't seem to accept the password in the URL anymore.

Is anyone still working on this? It appears the author has abandoned this project.

Is there any support for this program? I see others with problems like I'm experiencing with no solutions being provided. Another abandoned program?

Sorry, I'm the one that took it over but I've been busy. Trying to find a way to login differently.

Sorry, I'm the one that took it over but I've been busy. Trying to find a way to login differently.

;) It is very nice and ambitious, that you are developing this program by diassembling it but ... what happened with source of this program and who is the author of it?

Wouldn't it be simpler if authour would share a source code for future developing? Who is it anyway and why isn't he developing it by himself?

And to you omnicoder. Wouldn't it be simpler for you to write it from very beginning? You wold have access to normal code in jour fav language :)

Developing and updating app would be much nicer and could be wider then ;)

I keep getting this error:

Win7 Ultimate 32bit

See the end of this message for details on invoking

just-in-time (JIT) debugging instead of this dialog box.

************** Exception Text **************

System.Xml.XmlException: 'text' is an unexpected token. The expected token is '"' or '''. Line 6, position 13.

at System.Xml.XmlTextReaderImpl.Throw(Exception e)

at System.Xml.XmlTextReaderImpl.Throw(String res, String[] args)

at System.Xml.XmlTextReaderImpl.ThrowUnexpectedToken(String expectedToken1, String expectedToken2)

at System.Xml.XmlTextReaderImpl.ParseAttributes()

at System.Xml.XmlTextReaderImpl.ParseElement()

at System.Xml.XmlTextReaderImpl.ParseElementContent()

at System.Xml.XmlTextReaderImpl.Read()

at System.Xml.XmlLoader.LoadNode(Boolean skipOverWhitespace)

at System.Xml.XmlLoader.LoadDocSequence(XmlDocument parentDoc)

at System.Xml.XmlLoader.Load(XmlDocument doc, XmlReader reader, Boolean preserveWhitespace)

at System.Xml.XmlDocument.Load(XmlReader reader)

at System.Xml.XmlDocument.LoadXml(String xml)

at GmailNotifierPlus.Notifier.webClient_DownloadDataCompleted(Object sender, DownloadDataCompletedEventArgs e)

at System.Net.WebClient.OnDownloadDataCompleted(DownloadDataCompletedEventArgs e)

at System.Net.WebClient.DownloadDataOperationCompleted(Object arg)

************** Loaded Assemblies **************

mscorlib

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/Microsoft.NET/Framework/v2.0.50727/mscorlib.dll

----------------------------------------

Gmail Notifier Plus

Assembly Version: 2.1.0.0

Win32 Version: 2.1.0.0

CodeBase: file:///C:/Program%20Files/Gmail%20Notifier%20Plus/Gmail%20Notifier%20Plus.exe

----------------------------------------

System.Windows.Forms

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Windows.Forms/2.0.0.0__b77a5c561934e089/System.Windows.Forms.dll

----------------------------------------

System

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System/2.0.0.0__b77a5c561934e089/System.dll

----------------------------------------

System.Drawing

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Drawing/2.0.0.0__b03f5f7f11d50a3a/System.Drawing.dll

----------------------------------------

System.Runtime.Remoting

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Runtime.Remoting/2.0.0.0__b77a5c561934e089/System.Runtime.Remoting.dll

----------------------------------------

System.Xml

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Xml/2.0.0.0__b77a5c561934e089/System.Xml.dll

----------------------------------------

System.Web

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/assembly/GAC_32/System.Web/2.0.0.0__b03f5f7f11d50a3a/System.Web.dll

----------------------------------------

WindowsBase

Assembly Version: 3.0.0.0

Win32 Version: 3.0.6920.4902 built by: NetFXw7

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/WindowsBase/3.0.0.0__31bf3856ad364e35/WindowsBase.dll

----------------------------------------

PresentationCore

Assembly Version: 3.0.0.0

Win32 Version: 3.0.6920.4902 built by: NetFXw7

CodeBase: file:///C:/Windows/assembly/GAC_32/PresentationCore/3.0.0.0__31bf3856ad364e35/PresentationCore.dll

----------------------------------------

PresentationFramework

Assembly Version: 3.0.0.0

Win32 Version: 3.0.6920.4902 built by: NetFXw7

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/PresentationFramework/3.0.0.0__31bf3856ad364e35/PresentationFramework.dll

----------------------------------------

System.Core

Assembly Version: 3.5.0.0

Win32 Version: 3.5.30729.4926 built by: NetFXw7

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Core/3.5.0.0__b77a5c561934e089/System.Core.dll

----------------------------------------

System.Configuration

Assembly Version: 2.0.0.0

Win32 Version: 2.0.50727.4927 (NetFXspW7.050727-4900)

CodeBase: file:///C:/Windows/assembly/GAC_MSIL/System.Configuration/2.0.0.0__b03f5f7f11d50a3a/System.Configuration.dll

----------------------------------------

************** JIT Debugging **************

To enable just-in-time (JIT) debugging, the .config file for this

application or computer (machine.config) must have the

jitDebugging value set in the system.windows.forms section.

The application must also be compiled with debugging

enabled.

For example:

<configuration>

<system.windows.forms jitDebugging="true" />

</configuration>

When JIT debugging is enabled, any unhandled exception

will be sent to the JIT debugger registered on the computer

rather than be handled by this dialog box.

Hey guys,

I've been following this thread for awhile, more recently in hopes of finding a fix to this login (doesn't login, also sends password in plaintext) issue. Well, I finally got impatient and "fixed" it myself. I've got a modified version that changes the following:

1) The url opened when clicking on a message to open it is just of the form:

https://mail.google.com/mail/?shva=1#inbox/&lt;unique mail number&gt;

There's no plain text password or login information in the url. It assumes you've logged in already. If you're not logged in, google will ask you to.

2) The url opened when clicking "Go to your inbox" also just goes to the generic mail inbox address. As above, if you're already logged in, it will take you right there.

3) Same fix for composing mail.

For me, this is all I need. As long as I have checked "Stay signed in" in gmail, this works as originally intended. If not, I'll be asked to sign in everytime. In either case, my password is no longer sent in the url in plaintext.

I'd like to post a link for others to download my new version, however it would be nice to have consent from the original poster/coder first. If he isn't reachable, perhaps I can put it up anyway? I'm not sure what's acceptable. Let me know what you guys think.

apread

Hey guys,

I've been following this thread for awhile, more recently in hopes of finding a fix to this login (doesn't login, also sends password in plaintext) issue. Well, I finally got impatient and "fixed" it myself. I've got a modified version that changes the following:

1) The url opened when clicking on a message to open it is just of the form:

https://mail.google.com/mail/?shva=1#inbox/&lt;unique mail number&gt;

There's no plain text password or login information in the url. It assumes you've logged in already. If you're not logged in, google will ask you to.

2) The url opened when clicking "Go to your inbox" also just goes to the generic mail inbox address. As above, if you're already logged in, it will take you right there.

3) Same fix for composing mail.

For me, this is all I need. As long as I have checked "Stay signed in" in gmail, this works as originally intended. If not, I'll be asked to sign in everytime. In either case, my password is no longer sent in the url in plaintext.

I'd like to post a link for others to download my new version, however it would be nice to have consent from the original poster/coder first. If he isn't reachable, perhaps I can put it up anyway? I'm not sure what's acceptable. Let me know what you guys think.

apread

I think that's all everyone was anxiously waiting for! I hope you get permission to link it to us. It would be great. I, personally, would be grateful :D

I think that's all everyone was anxiously waiting for! I hope you get permission to link it to us. It would be great. I, personally, would be grateful :D

Good to hear. I've sent a PM to the OP as of this morning.

As a side note, one feature still neglected by my "fix" is the login if you have multiple accounts. Opening a mail item, for example, will just take you to the inbox of the currently logged-in user in your browser (although this won't happen if you don't choose to stay signed in to gmail). I only use one account, so this isn't an issue for me. Judging by the code, it looks like it would take more drastic changes to properly support auto-login for multiple accounts. If I had the full (original) source at my disposal, I could probably implement this feature properly. Since I'm only really able to modify the assembly right now, however, it is very unlikely I'll be able to change this.

Hopefully the OP gets back to me soon and is okay with me posting the modified version...

Hi guys,

Sorry for the lack of updates but there are a few reasons for this:

1. I have been very busy these last few months and I'm having a hard time finding time to work on the application. But I also kind of lost interest in developing it further because I've never wanted it to become a big complicated application that does coffee or other things that the actual Gmail already does better. I've created it to be just that: a notifier and I think it works pretty well.

2. I also kind of got tired of following the thread due to the huge amount of people requesting features all over the place or fixes for things that have been discussed many times before. Again, this is just a notifier, not a replacement for Gmail.

Anyway about that login thing, as you guessed, simply removing the auto login part of the url will not fix it. I could release a new version with that modified url but it would only fit people with only 1 account. What we need is to find a way to restore the original login thing the way it was before Google broke it. I've been trying to find a solution many times but I still haven't found anything working. My only hope right now would be to discover how it is done in the original notifier.

Hi guys,

Sorry for the lack of updates but there are a few reasons for this:

1. I have been very busy these last few months and I'm having a hard time finding time to work on the application. But I also kind of lost interest in developing it further because I've never wanted it to become a big complicated application that does coffee or other things that the actual Gmail already does better. I've created it to be just that: a notifier and I think it works pretty well.

2. I also kind of got tired of following the thread due to the huge amount of people requesting features all over the place or fixes for things that have been discussed many times before. Again, this is just a notifier, not a replacement for Gmail.

Anyway about that login thing, as you guessed, simply removing the auto login part of the url will not fix it. I could release a new version with that modified url but it would only fit people with only 1 account. What we need is to find a way to restore the original login thing the way it was before Google broke it. I've been trying to find a solution many times but I still haven't found anything working. My only hope right now would be to discover how it is done in the original notifier.

I think it would be nice if [either] you [or I] released a modified url version. It would only take a few minutes to do, and my understanding is that there are many users (apparently with only 1 account) who want this. Why not post this version? If you are not interested in posting it, can I?

Regarding the multiple account login issue: here is a page that lists 4 open source gmail notifiers. Perhaps you can look at their source(s) and see what they are doing to login?

I understand that you only want this to be a notifier, but I think it should also definitely be expected that any software release will be followed by feature requests by users. I personally would love to add some additional features to this notifier. Please let me know if you would consider sharing your source so that I might be able to add them. I could also try to fix the multiple login issue if you were feeling that you didn't have the time to do it...

hi guys,

does anyone know why this happens.

Firefox only recognizes the email address, not the password. however I can see my password in the URL box.

this does happen when I'm still logged in but do not have an active Firefox tab.

I just want gmail notifier plus to put my password so I can login by clicking 'sign in' or no email address and password. this way I can double click to enter my email address and password at once.

the way you see in the picture I've to manually enter my (long) password.

post-328168-12659965559162_thumb.png

Hi guys,

Sorry for the lack of updates but there are a few reasons for this:

1. I have been very busy these last few months and I'm having a hard time finding time to work on the application. But I also kind of lost interest in developing it further because I've never wanted it to become a big complicated application that does coffee or other things that the actual Gmail already does better. I've created it to be just that: a notifier and I think it works pretty well.

2. I also kind of got tired of following the thread due to the huge amount of people requesting features all over the place or fixes for things that have been discussed many times before. Again, this is just a notifier, not a replacement for Gmail.

Anyway about that login thing, as you guessed, simply removing the auto login part of the url will not fix it. I could release a new version with that modified url but it would only fit people with only 1 account. What we need is to find a way to restore the original login thing the way it was before Google broke it. I've been trying to find a solution many times but I still haven't found anything working. My only hope right now would be to discover how it is done in the original notifier.

Well, of course there's no obligation to keep updating a free app like this. But it would be great if you could just use the non-login URL or give apread the okay to post his, since links working for one account is still better than not working for anyone.

Also, FYI, the official Gmail notifier doesn't automatically log in, it just goes to http://mail.google.com/mail/ - if you're not logged in already, you have to do so.

Looking at the links apread suggested, KCheckGMail uses POST instead of GET to login. The POST format it uses is "Email=USER&Passwd=PASS&signIn=Sign+in&service=mail&continue=http%3A%2F%2Fmail.google.com%2Fmail%3F&ltmpl=default&ltmplcache=2&rm=false&rmShown=1&GALX=GALXValue" - substistuting USER, PASS, and GALXValue. From what I can understand looking at the KCheckGMail source code, and googling "gmail GALX", the GALX value is some kind of per-session value set as a cookie when you request the login page.

Does that help any?

Well, of course there's no obligation to keep updating a free app like this. But it would be great if you could just use the non-login URL or give apread the okay to post his, since links working for one account is still better than not working for anyone.

Also, FYI, the official Gmail notifier doesn't automatically log in, it just goes to http://mail.google.com/mail/ - if you're not logged in already, you have to do so.

Looking at the links apread suggested, KCheckGMail uses POST instead of GET to login. The POST format it uses is "Email=USER&Passwd=PASS&signIn=Sign+in&service=mail&continue=http%3A%2F%2Fmail.google.com%2Fmail%3F&ltmpl=default&ltmplcache=2&rm=false&rmShown=1&GALX=GALXValue" - substistuting USER, PASS, and GALXValue. From what I can understand looking at the KCheckGMail source code, and googling "gmail GALX", the GALX value is some kind of per-session value set as a cookie when you request the login page.

Does that help any?

Thanks for this, I'll see if I can get it working :)

I understand that you only want this to be a notifier, but I think it should also definitely be expected that any software release will be followed by feature requests by users. I personally would love to add some additional features to this notifier. Please let me know if you would consider sharing your source so that I might be able to add them. I could also try to fix the multiple login issue if you were feeling that you didn't have the time to do it...

It's not like I didn't expect to receive requests and I've improved the application a lot thanks to them but at some point it's getting ridiculous. Why would anyone want to be able to use an icon in the notification area when obviously the point of this notifier is to sit in the taskbar?

Hi guys,

Sorry for the lack of updates but there are a few reasons for this:

1. I have been very busy these last few months and I'm having a hard time finding time to work on the application. But I also kind of lost interest in developing it further because I've never wanted it to become a big complicated application that does coffee or other things that the actual Gmail already does better. I've created it to be just that: a notifier and I think it works pretty well.

2. I also kind of got tired of following the thread due to the huge amount of people requesting features all over the place or fixes for things that have been discussed many times before. Again, this is just a notifier, not a replacement for Gmail.

Anyway about that login thing, as you guessed, simply removing the auto login part of the url will not fix it. I could release a new version with that modified url but it would only fit people with only 1 account. What we need is to find a way to restore the original login thing the way it was before Google broke it. I've been trying to find a solution many times but I still haven't found anything working. My only hope right now would be to discover how it is done in the original notifier.

Glad to see you back! For multiple accounts, specifically, GApps emails, you could send users to the Google domain path with the email's domain at the end: http://mail.google.com/a/example.com

Unless there's something I'm overlooking, you can just get the domain portion of an email address and safely assume the url will be like that above. If I've logged in in the past, my browser cookies should keep me logged in without the notifier having to send any of my account information. It's a big assumption on my part, but it makes sense.

Ok I've been doing some tests and I'm able to retrieve that GALX value using POST then login securely. However, all of this is done "programmatically" and I can't find a way to open the inbox in the browser once I'm logged in :(

I also tried to retrieve a GALX value programmatically then login using the old way plus the GALX parameter and it doesn't work. This is strange because if I retrieve the GALX manually in Firefox and hardcode it in the code, it works.

I don't know if it makes sense to anyone but I think I'm gonna need help on this one :wacko:

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • I have been using Firefox for years.
    • I'd trust open source stuff on github more then closed source binaries from Microsoft.
    • OpenAI is now rolling out Lockdown Mode to more ChatGPT users by Pradeep Viswanathan Back in February, OpenAI first announced Lockdown Mode for users who want the most comprehensive protection from potential attacks. At the time of the announcement, the company mentioned that this feature was available to a small set of highly security-conscious users, including executives or security teams at leading organizations. Today, OpenAI announced that Lockdown Mode is now rolling out to all personal ChatGPT accounts, including Free, Go, Plus, and Pro, and also self-serve ChatGPT Business accounts. Users can enable the feature from ChatGPT Settings > Security when it is available for their account. When Lockdown Mode is enabled, ChatGPT limits or disables several features that connect to the web or external services. These include live web browsing, Deep Research, Agent Mode, and more. Here is the complete list of services that will be disabled in Lockdown Mode: Live web browsing: Web browsing is limited to accessing only cached content. Search results may be limited, unavailable, or stale. Image support: ChatGPT may not display images in regular responses or retrieve images from the web. Users can still upload image files, and image generation remains available where it is otherwise available. Deep research: Deep research is disabled. Agent mode: Agent mode is disabled. Canvas networking: Users cannot approve Canvas-generated code to access the network. File downloads: ChatGPT cannot download files for data analysis. ChatGPT can still operate on your manually uploaded files. It is important to note that Lockdown Mode does not completely block prompt injections from appearing in content that ChatGPT processes. For example, a malicious instruction could still be present in an uploaded file or cached web content. However, the mode is designed to reduce the ways such an attack could send sensitive information outside the conversation. Along with Lockdown Mode, OpenAI today also announced that the Active sessions feature is now available across ChatGPT accounts and workspace types. This feature allows users to review where their account is signed in across devices and end sessions if required. A session will have the following information displayed: Device or browser information. First-party app context, such as ChatGPT, Codex, or API Platform. Approximate location. Sign-in date and time. Whether the device is a trusted device. Whether it is your current session. OpenAI highlighted that the Active sessions feature will not be available for accounts linked to an organization’s single sign-on setup, including SAML or OIDC.
  • Recent Achievements

    • Rookie
      moog19 went up a rank
      Rookie
    • Mentor
      grik went up a rank
      Mentor
    • Dedicated
      JKR earned a badge
      Dedicated
    • One Year In
      CHUNWEI earned a badge
      One Year In
    • Conversation Starter
      FBSPL earned a badge
      Conversation Starter
  • Popular Contributors

    1. 1
      +primortal
      491
    2. 2
      PsYcHoKiLLa
      270
    3. 3
      Skyfrog
      75
    4. 4
      Steven P.
      68
    5. 5
      FloatingFatMan
      63
  • Tell a friend

    Love Neowin? Tell a friend!