4 ms·
Bring back google+. oh wait, I guess we really can't trust anyone with user data. https://en.wikipedia.org/wiki/2018_Google_data_breach https://en.wikipedia.or
by kart23 4y ago
Bring back google+. oh wait, I guess we really can't trust anyone with user data.
https://en.wikipedia.org/wiki/2018_Google_data_breach https://en.wikipedia.org/wiki/2018_Google_data_breach
>In October 2018, the Wall Street Journal published an article outlining the initial breach and Google's decision to not disclose it to users.[18] At the time, there was no federal law that required Google to inform their consumers of data breaches. Google+ originally did not disclose the breach out of fears of being compared to Facebook's recent data leak and subsequent loss of consumer confidence.[4] In response to the Wall Street Journal article, Google announced the shutdown of Google+ in August 2019.
- Thorrez 4y agoWhat is the definition of a breach? Are all vulnerabilities considered breaches? If a website finds a vulnerability in their code, fixes it, and doesn't find any evidence of attack, do they generally tell the public about that? Disclosure: I work at Google, but never on Google+.
- leksak 4y agoDepends on the vulnerability. It might be prudent to disclose it so users have the freedom to, for instance, change their passwords elsewhere as most people do indeed reuse passwords. I'm not sure how this metaphor holds up under scrutiny but disclosing all vulnerabilities might be akin to considering yourself having had a break-in every time you forgot to lock the door.
- lrem 4y agoFrom the linked article: > unauthorized access to private users' names, emails, addresses, occupations, genders and ages. Dislaimer: I work in Google, but don't know anything about the breach that isn't in the linked article.