3 ms·
I'm still amazed that this individual published as much data as he did. I don't see where it says they have permission to do so. Specially because: > I hope
by outworlder 8y ago
I'm still amazed that this individual published as much data as he did. I don't see where it says they have permission to do so.
Specially because:
> I hope they won’t beat me with a stick for disclosing any of this
This tells me that this wasn't cleared with them. Doesn't sound like a smart move. If your gut is telling you it may be a bad idea, it could be because it is...
- bowmessage 8y agoYeah, while it might be interesting to know what Gmail's system user is, it's not really related at all to the vuln. I wouldn't be surprised if payment of the bounty was contingent on some kind of ToS acceptance about responsible disclosure...
- londons_explore 8y agoThe page he accessed probably contained thousands of Google borg jobs. Many about secret or future projects for example. Many giving implementation details for secret sauce algorithms (eg. oh - they precompute all possible misspellings for their spell corrector via this mapreduce!). Simply knowing the fleet wide CPU, network and RAM usage for Gmail would give a competitor a lot of knowledge into the probable running costs of the service for example. In this case he exposed a tiny proportion of what he accessed. Sounds fairly reasonable to me.
- asfasgasg 8y agoUh, how does that follow? In what other domain do you get a pass for doing a little unnecessary harm because you could have done much more?