2.5B Gmail users endangered after Google database hack
1–10 of 17 posts
Re: 2.5B Gmail users endangered after Google database hack
#2So many hacks before that had name, address, phone, ss number, had it all and people don't blink an eye.
Until it happens to them.
Re: 2.5B Gmail users endangered after Google database hack
#3I get the sense that there was a time when Google would have not have trusted an off-the-shelf solution like Salesforce, and would have built their own in-house thing.
Re: 2.5B Gmail users endangered after Google database hack
#4Don't worry I still get advertisements I can't unsubscribe from with one click from silicon valley bros.
Re: 2.5B Gmail users endangered after Google database hack
#5So many hacks before that had name, address, phone, ss number, had it all and people don't blink an eye. Until it happens to them.
I remember hearing that Google forced its insurance provider to make up new IDs for employees rather then use SSN, which was common at the time.
Re: 2.5B Gmail users endangered after Google database hack
#6Isn't this huge from Google's security perspective? I don't recall any previous successful attack on its core infrastructure.
A quick search/prompt shows:
- Operation Aurora: https://en.wikipedia.org/wiki/Operation_Aurora>
- 2010s global surveillance disclosures: https://en.wikipedia.org/wiki/2010s_global_surveillance_disc...>
Re: 2.5B Gmail users endangered after Google database hack
#7> Activate Google’s Advanced Protection Program
I'm dubious. This requires you give google a phone number. Almost universally if you give a company a phone number there is eventually an avenue for an attacker to convince the company to give them control of the account by demonstrating control of the number (which they've sim swapped or otherwise hijacked).
Even if at the moment there is no avenue to exploit google this way (also doubtful), all it takes is some new product (like workspaces) that has a different security understanding or new bugs to open a vector.
Re: 2.5B Gmail users endangered after Google database hack
#8Don't worry I still get advertisements I can't unsubscribe from with one click from silicon valley bros.
Now they can train ad bots on your emails too!
Re: 2.5B Gmail users endangered after Google database hack
#9Duplicate of event from August 5 ("one of Google’s corporate Salesforce instances was impacted"):
https://news.ycombinator.com/item?id=44812343
https://cloud.google.com/blog/topics/threat-intelligence/voi...
Re: 2.5B Gmail users endangered after Google database hack
#10> Activate Google’s Advanced Protection Program I'm dubious. This requires you give google a phone number. Almost universally if you give a company a phone number there is eventually an avenue for an attacker to convince the company to give them control of the account by demonstrating control of the number (which they've sim swapped or otherwise hijacked). Even if at the moment there is no avenue to exploit google th…
A phone number is optional if you give a recovery email. Create an iCloud account you don't use for any other reason and don't share it with anyone.