Our lead programmer sent me this:
Here is some scary stuff…
http://www.makeuseof.com/tag/breaking-gmail-security-flaw-more-domains-get-stollen/
Apparently this is only the web-based interface that is vulnerable, so
if you don’t login to your google account via the web, and just use IMAP
or POP from thunderbird, you’re OK … except I’m sure both of us log in
to our google accounts every day…..