Possible Blogger Security Hole?

So there I was, a warm winter day sitting in my office here in San Diego, California. I had just signed up for my new more professional email account and was working on migrating my blogger stuff over to that account.

Then I thought to myself, "Self, you don't really want to have your old email account listed for you blogs do you?" Then I thought some more, "Well Self, a sub user that was added to an account typically can't delete the owner." So as sat there I decided to just check anyway.

I hate things being cluttered and having accounts where they don't need to be. I clicked on the Settings tab and then on the Permissions link. "Oh Self, this is stupid, You're not going to be able to remove it, It's the owner and You're just an Administrator." Then sure enough to my surprise there it was. The Remove button. "Wow Self, You really can do this I guess." Sure enough as the Spike Shooters do make you feel like you're on crack, it worked. I was able to remove the Owner/Creator of the blog!

So to sum this story up. Do not add anyone as an Administrator to your blog for one day they may remove you from the blog without your permission and everything you live for and love will be lost and there's nothing you can do about it...



(queue evil music while screen fades to black)

By Sundance now of Make Me A Sammich Games

Posted in: administrator, blogger, security warning, vulnerability