4 ms·

Does operation Aurora count by the Chinese government? It was a big enough deal to Google that they stopped operating a search engine within China's borders. ht

by eric-hu 10y ago

Does operation Aurora count by the Chinese government? It was a big enough deal to Google that they stopped operating a search engine within China's borders. https://en.m.wikipedia.org/wiki/Operation_Aurora https://en.m.wikipedia.org/wiki/Operation_Aurora https://www.washingtonpost.com/world/national-security/chinese-hackers-who-breached-google-gained-access-to-sensitive-data-us-officials-say/2013/05/20/51330428-be34-11e2-89c9-3be8095fe767_story.html https://www.washingtonpost.com/world/national-security/chine... How about when Google's data center links were tapped by the NSA? https://www.washingtonpost.com/world/national-security/nsa-infiltrates-links-to-yahoo-google-data-centers-worldwide-snowden-documents-say/2013/10/30/e51d661e-4166-11e3-8b74-d89d714ca4dd_story.html https://www.washingtonpost.com/world/national-security/nsa-i...

jdavis703 10y ago
I thought it was mostly IP and a couple of accounts that were taken. Nothing on the scale of millions of records taken? I could be wrong however.
- barkingcat 10y ago
  It was a pretty serious breach as far as I remember. The assailing party was looking for specific accounts, and got what they were looking for. Just because they didn't take millions of records didn't mean that they didn't have access to them. Google right after the NSA reveal started doubling up on their efforts to use encrypted links between servers within their data centers, leading me to believe that it could have been a lot worse - just get access to some non-critical host, and if the traffic is unencrypted, just hang out with a packet sniffer and just record all traffic passing by. Google is much more vigilant with their security (not that they weren't before, just even more so) - It's better to not underestimate the extent of breaches.

4 ms·

Does operation Aurora count by the Chinese government? It was a big enough deal to Google that they stopped operating a search engine within China's borders. ht

by eric-hu 10y ago

jdavis703 10y ago
I thought it was mostly IP and a couple of accounts that were taken. Nothing on the scale of millions of records taken? I could be wrong however.
- barkingcat 10y ago
  It was a pretty serious breach as far as I remember. The assailing party was looking for specific accounts, and got what they were looking for. Just because they didn't take millions of records didn't mean that they didn't have access to them. Google right after the NSA reveal started doubling up on their efforts to use encrypted links between servers within their data centers, leading me to believe that it could have been a lot worse - just get access to some non-critical host, and if the traffic is unencrypted, just hang out with a packet sniffer and just record all traffic passing by. Google is much more vigilant with their security (not that they weren't before, just even more so) - It's better to not underestimate the extent of breaches.