Live data from Hacker News

Google Baraza

google.com

41–50 of 72 posts

Re: Google Baraza

#41
post #5

"What is Google Baraza?" "I am a member of the Google Baraza team. One of Google’s goals in Africa is to make the internet more locally relevant and bring more people online. One of the challenges of the internet in Africa is that there is a lack of local content online. At Google, we find that users search for information about local businesses, entertainment, health, etc but often don’t find it because the informat…

Why should Africans use this instead of existing Q/A sites like Quora?

Bandwith measures seems to be important, local infrastructure (lower ping), text-based access, ... many things to think of.

Re: Google Baraza

#43

To me, I actually see this as Google crowdsourcing the data necessary to have "answers" appear rather than search results for those things that make sense to.

I was thinking more along the lines of upping their game against Siri.

Re: Google Baraza

#45

Earlier quoted context omitted.

Are you sure that the Google authentication token(s) sent over HTTP can actually be used to perform sensitive actions (e.g. reading/sending mail, changing settings)? That is, perhaps Google require an HTTPS-only token for sensitive actions and the authentication token sent over HTTP is only used for basic personalization (like showing your username) and some unimportant actions? Though I guess we know that someone wh…

No, I'm not sure and your questions are valid. But wouldn't you be happier if they used https and the questions wouldn't have to be asked in the first place? This practice of having a website respond to both http and https simply has to die. Google is not the only offender here, but I expected more from them, because they are very security sensitive. Google, next time you accuse Chinese of hacking you, reconsider you…

There's actually no excuse ... SSL is cheap today and by terminating it at a load balancer or proxy, you don't even have to think about its impact on web-server performance. I imagine that Google has racks of equipment dedicated to SSL termination already!

Re: Google Baraza

#47

How come Google releases new software that is not using https, and still I'm logged in with my account. I'm surprised google can still make that mistake, making my account vulerable after going to so much trouble of protecting it with 2factor auth.

YouTube defaults to HTTP as well. The security threat is pretty minimal, but an evil captive portal could sneakily grab your signed-in Google email if they wanted to.
Post reply on HN