[Ars] [Updated] Google+ shutting down after data leak affecting 500,000 users - Overclock.net - An Overclocking Community
Forum Jump: 

[Ars] [Updated] Google+ shutting down after data leak affecting 500,000 users

Reply
 
Thread Tools
post #1 of 31 (permalink) Old 10-09-2018, 05:20 PM - Thread Starter
Waiting for 7nm EUV
 
tpi2007's Avatar
 
Join Date: Nov 2010
Posts: 11,486
Rep: 900 (Unique: 504)
[Ars] [Updated] Google+ shutting down after data leak affecting 500,000 users

Quote:
Google exposed the private details of almost 500,000 Google+ users and then opted not to report the lapse, in part out of concern disclosure would trigger regulatory scrutiny and reputational damage, The Wall Street Journal reported Monday, citing people briefed on the matter and documents that discussed it. Shortly after the article was published, Google said it would close the Google+ social networking service to consumers.

The exposure was the result of a flaw in programming interfaces Google made available to developers of applications that interacted with users’ Google+ profiles, Google officials said in a post published after the WSJ report. From 2015 to March 2018, the APIs made it possible for developers to view profile information not marked as public, including full names, email addresses, birth dates, gender, profile photos, places lived, occupation, and relationship status. Data exposed didn’t include Google+ posts, messages, Google account data, phone numbers, or G Suite content. Some of the users affected included paying G Suite users.
Quote:
The Google post said analysts found no evidence the API bugs were actively exploited by developers. But the post also said that, to ensure privacy, the company destroys most Google+ logs after two weeks. According to the WSJ, an internal memo acknowledged there was no way to know. People who have used Google+ during the time the bugs were active should assume any exposed data is publicly available.
(Bold and underlined for emphasis)

Source.



Update:

[Ars] Senators to Google: Why didn’t you disclose Google+ vulnerability sooner?

Quote:
Three United States senators have demanded that Google provide answers about its recent disclosure of a security breach in its Google+ social network that led to its closure. Google only came forward after the Wall Street Journal broke the story on October 8.

So far, one federal proposed class-action lawsuit has been filed in the wake of the episode.

(...)

Quote:
Please describe in detail when and how Google became aware of this vulnerability and what actions Google took to remedy it.

Why did Google choose not to disclose the vulnerability, including to the Committee or to the public, until many months after it was discovered?

Are there similar incidents which have not been publicly disclosed?



Please provide a copy of Google's internal memo cited in the WSJ article.

Given their active stance on Project Zero, exposing other companies' bugs, it will be interesting to see how Google responds (they have to until Oct 30).



Last edited by tpi2007; 10-12-2018 at 05:51 AM.
tpi2007 is offline  
Sponsored Links
Advertisement
 
post #2 of 31 (permalink) Old 10-09-2018, 08:21 PM
PC Gaming Master Race
 
Stealth Pyros's Avatar
 
Join Date: Jan 2008
Location: Orlando, FL
Posts: 10,083
Rep: 450 (Unique: 355)
I wonder if this is why, out of nowhere, I went from having absolutely 0 junk e-mails in my GMail to 500+ at a time.

Quote:
Originally Posted by Lifeshield go_quote.gif

Regarding a target audience... pigs roll around in mud and crap all day, they love it, but it's still mud and crap they're rolling around in at the end of the day.
OCN quotes:Warning: Spoiler! (Click to show)
Quote:
Originally Posted by Schoat333 go_quote.gif

LG's best Android phone is like having the shiniest turd.
(So true)
Quote:
Originally Posted by Abs.exe go_quote.gif

How do you think they are making money? If you have a gmail account or a phone even without gmail on it google has a folder with your name on it with all your life and private information stored. I'm talking about what IP you use to browse the internet to your bookmarks to your most visited website ( Yes, they know you do thumb.gif).
Quote:
Originally Posted by Abs.exe go_quote.gif

Just grab a real web browser instead. Google is ripping every single data you can give them. I wonder how long they know on you.
doh.gif


Stealth Pyros is offline  
post #3 of 31 (permalink) Old 10-10-2018, 01:46 AM
in da freezing hell
 
termathor's Avatar
 
Join Date: Jul 2015
Posts: 314
Rep: 4 (Unique: 4)
Quote: Originally Posted by Stealth Pyros View Post
I wonder if this is why, out of nowhere, I went from having absolutely 0 junk e-mails in my GMail to 500+ at a time.
Most likely, yes, mate. Someone got the data and made something of it ...

Marvin
(16 items)
CPU
Intel Core i5-4690K [email protected] GHz
Motherboard
ASUS Maximus VII Impact mini-itx
GPU
Asus GeForce GTX 970 DirectCU Mini
RAM
Trident X, 2 X 8 Go, 2400 MHz, CAS 10
Hard Drive
Samsung 850 EVO SSD, 512GB
Hard Drive
Seagate Desktop SSHD, 2TB
Power Supply
Corsair HX850i
Cooling
Corsair H90
Case
Thermaltake Core V1
Operating System
W7
Operating System
SteamOS
Monitor
Big Samsung TV screen, sofa operated
Keyboard
Logitech K810
Mouse
Logitech G602
Audio
Bose Soundtouch 1300
Other
Steam Controler
▲ hide details ▲
termathor is offline  
Sponsored Links
Advertisement
 
post #4 of 31 (permalink) Old 10-10-2018, 07:24 AM
Old to Overclock.net
 
Join Date: Jan 2008
Posts: 2,091
Rep: 125 (Unique: 106)
Can't say I'm surprised. For all their game changing services and the pedestal people put them on, Google has quite an extensive sea of failed projects even in recent history; to which they can now add to with this. If they scuttled it over the data breach than that is indeed pretty dirty tricks at play.

362436
(15 items)
CPU
AMD Ryzen 5 1600
Motherboard
Asus Prime X370-A AMD Ryzen AM4 DDR4
GPU
Gigabyte GeForce GTX 950
RAM
2x Corsair Valueselect 8GB 288 Pin DDR4 SDRAM DDR4 @ 2133
Hard Drive
Corsair Force LS 2.5" 120GB SATA III MLC SSD
Optical Drive
Lite-On 24X SATA DVD/RW Optical Drive
Power Supply
Corsair RM550x 550W 80 Plus Gold
Cooling
Noctua NH-L9A-AM4 Low-Profile
Case
Antec NSK4100 Steel ATX Mid Tower
Operating System
Mint 18.2 x64
Monitor
HP 24" LCD/LED 1920x1080
Keyboard
IBM PC-AT
Mouse
Logitech G5
Audio
Sennheiser HD650
Audio
Asus Essence STX II
▲ hide details ▲


xJumper is offline  
post #5 of 31 (permalink) Old 10-10-2018, 07:36 AM
New to Overclock.net
 
adamkatt's Avatar
 
Join Date: Apr 2011
Location: Ohio
Posts: 2,590
Rep: 47 (Unique: 43)
Do people even use Google+?

Case: -
Hard Drive: Crucial BX100 250GB
Motherboard: ASUS Z170-A ATX Operating System: Windows 10
CPU:i7-7700K
RAM: Ballistix Sport 16 GB
Monitor: VIVO Dual LCD LED Monitor Desk Mount Monitor: ASUS VH242
Power Supplies: EVGA SuperNOVA 550 G2, 80+ GOLD 550W
GPU: ASUS GTX 660 STRIXX
Cooling: Hydro Series, H100i v2
Mouse: Logitech G400 Keyboard: Logitech
http://www.sympato.ch/smileys/ola.gif
adamkatt is offline  
post #6 of 31 (permalink) Old 10-10-2018, 12:15 PM
New to Overclock.net
 
Assirra's Avatar
 
Join Date: Jul 2009
Posts: 3,102
Rep: 96 (Unique: 66)
Quote: Originally Posted by adamkatt View Post
Do people even use Google+?
I dont' think they use it but pretty sure it was/is a requirement to post a comment on youtube.

Assirra is offline  
post #7 of 31 (permalink) Old 10-10-2018, 12:27 PM
Top kek
 
Join Date: Oct 2013
Location: Bulgaria , Sofia
Posts: 3,545
Rep: 121 (Unique: 72)
Quote: Originally Posted by Assirra View Post
I dont' think they use it but pretty sure it was/is a requirement to post a comment on youtube.
Nope. As long as you have Google account, or had Youtube account, you can post.

Previous Hardware:
Spoiler!
Main rig
(16 items)
Parents (2nd) PC
(13 items)
CPU
AMD R7 1700
Motherboard
ASRock X570 Fatal1ty Gaming K4
GPU
Sapphire RX480 4GB Nitro+
RAM
Corsair Vengeance LPX 2x8GB 3200Mhz
Hard Drive
Corsair ForceLS SSD
Hard Drive
250GB Maxtor SATA 7200RPM 8MB
Hard Drive
250GB Seagate Baracuda SATA 7200RPM 8MB
Hard Drive
500GB WesternDigital Blue 7200RPM 16MB
Power Supply
Corsair TX850M
Cooling
Cooler Master 212 EVO
Case
Thermaltake View 27
Operating System
Windows 10 x64 1607
Monitor
AOC i2267FWH 21.5" 1080p IPS
Keyboard
Logitech K120
Mouse
A4 Tech Bloody v5
Audio
Corsair HS30 Raptor
CPU
AMD FX-8320
Motherboard
ASRock Fatal1ty 990FX Killer
GPU
XFX RX470 4GB SingleFan
RAM
Mushkin Redline 996996 2x4GB 2133Mhz
Hard Drive
Western Digital Green 500GB 7200RPM 8MB
Hard Drive
120GB Kingston SSD
Optical Drive
ASUS DVD+RW x52
Power Supply
Corsair VS650
Cooling
ThermalTake Frio Silent 14
Case
DeepCool Tesseract
Operating System
Windows 10 Enterprise 1607
Monitor
ASUS VS228H 21.5"
Keyboard
Logitech K120
▲ hide details ▲
ku4eto is offline  
post #8 of 31 (permalink) Old 10-10-2018, 02:11 PM
New to Overclock.net
 
Thingamajig's Avatar
 
Join Date: Aug 2007
Posts: 3,622
Rep: 138 (Unique: 122)
The bigger the company, the harder they fall......(and, consequently, less you can trust them)

Google crossed that threshold for me 10 years ago. Been boycotting all their services since.

Umbra
(10 items)
CPU
i7 7700K
Motherboard
ASUS ROG Strix z270i ITX
GPU
Zotac 1070 Mini
RAM
Corsair Vengeance LPX (2x8GB) DDR4
Hard Drive
2x 2TB Seagate Guardian Barracuda 2.5"
Hard Drive
M.2 Western Digital Black 256GB
Optical Drive
Panasonic UJ-265 SATA Slot Blu-ray Writer
Power Supply
700w Silverstone SST-SX700-LPT SFX
Cooling
Heatkiller v3 CPU Block
Case
Cougar QBX Mini
▲ hide details ▲
Thingamajig is offline  
post #9 of 31 (permalink) Old 10-10-2018, 03:30 PM
New to Overclock.net
 
doritos93's Avatar
 
Join Date: Oct 2009
Location: Montreal
Posts: 2,309
Rep: 119 (Unique: 84)
I like that someone somewhere had to declare that fixing this vulnerability would be more costly than what Google+ can generate in revenue lol



doritos93 is offline  
post #10 of 31 (permalink) Old 10-10-2018, 04:13 PM
New to Overclock.net
 
Assirra's Avatar
 
Join Date: Jul 2009
Posts: 3,102
Rep: 96 (Unique: 66)
Quote: Originally Posted by ku4eto View Post
Nope. As long as you have Google account, or had Youtube account, you can post.
Ah just looked it up, seems this was removed in 2015.

Assirra is offline  
Reply

Quick Reply
Message:
Options

Register Now

In order to be able to post messages on the Overclock.net - An Overclocking Community forums, you must first register.
Please enter your desired user name, your email address and other required details in the form below.
User Name:
If you do not want to register, fill this field only and the name will be used as user name for your post.
Password
Please enter a password for your user account. Note that passwords are case-sensitive.
Password:
Confirm Password:
Email Address
Please enter a valid email address for yourself.
Email Address:

Log-in



Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Show Printable Version Show Printable Version
Email this Page Email this Page


Forum Jump: 

Posting Rules  
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off