Google has now patched the flaw, but this does represent a serious risk to the privacy of users, and could put them in danger ...