Live data from Hacker News

Google Exposed User Data, Feared Repercussions of Disclosing to Public

wsj.com

171–180 of 277 posts

Re: Google Exposed User Data, Feared Repercussions of Disclosing to Public

#171

Earlier quoted context omitted.

It's a fancy bit of PR-fu right here from Google, like releasing a jobs report right after a big hurricane hits so people don't notice it. A data breach is one thing, but the cover-up should put the nail in coffin of Google's image as benevolent good guys. They are basically Comcast now.

Is it a data breach if they know that nobody used it?

It is not a data breach if they know, but they can't really know bc they don't keep the logs for more than 2 weeks

Re: Google Exposed User Data, Feared Repercussions of Disclosing to Public

#172

Just this weekend, I setup a domain name, setup email, and setup apps and accounts to replace Google with open-source software and servers I control, generally (I use some 3rd party services that I feel I can trust, like Fastmail and Namecheap). I then turned off and deleted all of my data from Google that I could without deleting my Google account (I need to forward this long-standing email to my new email and I don…

I've been considering a switch to Fastmail myself and I have a domain on their free trial right now. I'm going to be pulling the trigger end of this month. Only thing that sucks is going and changing my email address everywhere. Like you I'm doing it for piece of mind knowing I can switch providers elsewhere if I need to down the line. I'd rather pay $50US each year then be as tangled up in Google's services as I was.

Re: Google Exposed User Data, Feared Repercussions of Disclosing to Public

#173

Earlier quoted context omitted.

HA... Google is definitely doing Evil. I for one experienced personally when they invited my friend & I to discuss buying our app. They just wanted our secret sauce & after baiting us with promise of working together they us kicked us out and said the race is on. Now there was no guarantees we’d be working together but two guys with no connections is tricked by Google and told the race is on? Us vs. Google who later…

Ah yes, the perennial story of the lone inventor or two, with a world changing invention, who has their idea stolen by a big company. Did it ever occur to you that the idea of syncing video or audio playback across devices or people is not a new idea and is continually reinvented? I've been on the net since '86, and every brilliant idea I had in secret, I was surprised to learn had been thought of by others too. The…

Well your employer was granted patents for what we met them for and emphatically said to us the race is on.

So your saying it held no value to your employer and they have every right to treat the little guy dreamer inventors who do not have the right connections like dogs?

Also it wasn't nor isn't an idea rather algorithms we created in 2013 (have improved since) that just worked and work now... demo videos below...

Turn audience & their devices into a stereo system https://vimeo.com/71647538

Drive In Movie app(listen to movie's audio on your device) https://vimeo.com/93899424

Re: Google Exposed User Data, Feared Repercussions of Disclosing to Public

#174
post #54

Earlier quoted context omitted.

How many vulns do you think companies find internally daily? Should every vuln be publicized?

If they potentially expose sensitive data, yes. Again, if an organization is certain that it hasn't then I'd say no. Sure, certain is a high bar but there's absolutely no way for people to make informed decisions and/or mitigate issues otherwise.

That's going to be on the order of thousands or tens of thousands of bugs per year for each large company. It also discourages businesses from performing pentests since finding anything leads to shitty press. And this is largely useless information since it gives no info about unknown bugs. This makes it seem like small companies with no security apparatus are actually safer because all of their bugs remain unknown.

Re: Google Exposed User Data, Feared Repercussions of Disclosing to Public

#175
post #147

Earlier quoted context omitted.

I would think it should be required to report. Just because you don’t know if a vulnerability was exploited does not mean it was not.

I assume cloud providers have hundreds of security issues that are found internally over the course of a year. Requiring reporting would certainly be a step forward and testing in production for software would maybe be seen as what it is, an engineering anomaly and failure to perform due diligence.

You are going to be off by at least an of magnitude. You'd see multiple reports per day for a diligent company.

Re: Google Exposed User Data, Feared Repercussions of Disclosing to Public

#177
post #161

Earlier quoted context omitted.

User IDs are definitely private info, since they'd allow you to follow a user's behaviour etc.

"user 1234567 viewed post 89564385943" I can see how that's private info, but would this be: "client x viewed user 1234567's profile"

Neither are private info. Private in theop law sense.

Re: Google Exposed User Data, Feared Repercussions of Disclosing to Public

#178

Earlier quoted context omitted.

HA... Google is definitely doing Evil. I for one experienced personally when they invited my friend & I to discuss buying our app. They just wanted our secret sauce & after baiting us with promise of working together they us kicked us out and said the race is on. Now there was no guarantees we’d be working together but two guys with no connections is tricked by Google and told the race is on? Us vs. Google who later…

Ah yes, the perennial story of the lone inventor or two, with a world changing invention, who has their idea stolen by a big company. Did it ever occur to you that the idea of syncing video or audio playback across devices or people is not a new idea and is continually reinvented? I've been on the net since '86, and every brilliant idea I had in secret, I was surprised to learn had been thought of by others too. The…

Why do so many Googlers on HN have such unpleasant personalities? "Did it ever occur to you" that you make your employer look even more awful?

Re: Google Exposed User Data, Feared Repercussions of Disclosing to Public

#179
post #161

Earlier quoted context omitted.

User IDs are definitely private info, since they'd allow you to follow a user's behaviour etc.

"user 1234567 viewed post 89564385943" I can see how that's private info, but would this be: "client x viewed user 1234567's profile"

Sure, if user 1234567 isn’t particularly popular.
Post reply on HN