4 ms·
Didn't the WSJ say that Google shut down G+ in response to this vulnerability? Would it be fair to say "They re-audited an application, found a minor vulnerabil
by matthewrobertso 8y ago
Didn't the WSJ say that Google shut down G+ in response to this vulnerability? Would it be fair to say "They re-audited an application, found a minor vulnerability, and fixed it, decided the impact was so severe that G+ should not exist anymore"?
- tptacek 8y agoNo! That is not at all a fair read, even if you take the statement at face value, which nobody does. What they're saying is that they audited the application, found a vulnerability, and then re-evaluated the project in light of its importance to the company and commercial prospects, and decided that the work required to keep maintaining and securing it to the standard they had set for themselves --- again, a standard far higher than most tech companies --- wasn't justified by the returns they'd get on the investment. Better to stop doing it at all than to gradually slide into doing it half-assed.