Google already fixed many privacy issues in Google Buzz, but still there are some serious loopholes spammers can use to get your Gmail user ID.

Do you know how spammers can quickly get your Email Id using Google Buzz even though you have set your profile URL to show numbers instead of username?

Here is how:

To get thousands of Gmail user IDs visit Google Buzz profile of any famous personality on the Internet having many Google Buzz followers. How to find such famous personality? Just look for top 100 blogs on Technorati.  Find the top blogs that are on Google Buzz and visit their Google Buzz profile URL.

Let’s take example of one famous social media blog “Mashable!”  that is ranked 4th on Technorati.

1) Visit the Google Buzz profile of Mashable CEO:  http://www.google.com/profiles/mashable

2) Now click on comments link on any Buzz topic to expand and see all the comments. When you expand the comments you will see author name who made the comment and link to his/her profile.

3) Hover mouse over any profile (even on profiles showing profile URL with numbers) and change mouse cursor focus on “View Full Profile” link. On browser status bar you will see profile URL of this Google user. It looks something like:  http://www.google.com/profiles/username

You can easily note down the username from this profile URL and this is the Gmail Id of this user (username@gmail.com). That’s it.

This means even if you set your profile URL with some numbers (E.g. http://www.google.com/profiles/1347583434345#buzz) anyone can get your Gmail username and this is true for many Google Buzz profile URLs that I observed.

Try it yourself.

Only Google know if this is a bug in Google buzz or one of its features!

To get 1000 Gmail email addresses spammer can happily spend one-two hours on any famous Google Buzz profile.

Warning: So whether you use numbers in your profile or not, your email address is no longer hidden from spammers. So be careful before commenting on any Google Buzz post.