3 ms·
What is the definition of a breach? Are all vulnerabilities considered breaches? If a website finds a vulnerability in their code, fixes it, and doesn't find an
by Thorrez 4y ago
What is the definition of a breach? Are all vulnerabilities considered breaches? If a website finds a vulnerability in their code, fixes it, and doesn't find any evidence of attack, do they generally tell the public about that?
Disclosure: I work at Google, but never on Google+.
- leksak 4y agoDepends on the vulnerability. It might be prudent to disclose it so users have the freedom to, for instance, change their passwords elsewhere as most people do indeed reuse passwords. I'm not sure how this metaphor holds up under scrutiny but disclosing all vulnerabilities might be akin to considering yourself having had a break-in every time you forgot to lock the door.
- lrem 4y agoFrom the linked article: > unauthorized access to private users' names, emails, addresses, occupations, genders and ages. Dislaimer: I work in Google, but don't know anything about the breach that isn't in the linked article.