Major Google Web Accelerator Security Issue

By tajddin
in Site & Forum Issues

 Share

Recommended Posts

Rising Star

tajddin

Posted
Posted (edited)

I just logged into Neowin and notice that I had logged in as several neowin users. Every time I refreshed the page, the username changed, and I could access any portion of the site.

I was able to access their control panels and possibly even post (I did so to make sure that this was a security issue.)

It is still happening and I apologize if that has already been posted.

Edit:

This is a major Google Web Accelerator security issue:

http://news.zdnet.co.uk/internet/security/...39197327,00.htm

"I went to the Futuremark forums and noticed that I'm logged in as someone I don't know. Great, I've used Google's Web Accelerator for a couple of hours, visited lots of sites where I'm logged in. Now I wonder how many people used my cache. I understand it's a beta, sure, but something like that is totally unacceptable."

Edit 2:

Someone please modify the title of this thread. At the time of its posting, I hadn't realized it was a Google issue.

(MOD EDIT: changed the title now, hope that helps... DB)

Edited by dbfriends
Grand Master

mistical

Posted
Posted
I just realized: Could it be because of Google's Web Accelerator?

It is because of it. I'd highly recommend people stay away from this tool. I love Google but I don't like this tool at all, it's useless really and don't like what they are doing with it.

Here's SlashDot's discussion, http://slashdot.org/article.pl?sid=05/05/0...&tid=217&tid=95 and also SomethingAwful, which I do not visit but got passed the link also has an article on Google's Web Accelerator that's a pretty good read, believe the links though are banned here on the forum though. So look for yourself if you want to read it.

Grand Master

mAcOdIn Veteran

Posted
  • Veteran
Posted

What could a mod do though? If it truly shares your cookies, the only way to combat it would be to disable cookies and make you sign in at all times.

The issue isn't with Neowin, cookies were designed to store your info for a site on your computer, if your cookie gets shared it's not the sites fault. You need to complain to google, not neowin.

Rising Star

tajddin

Posted
  • Author
Posted
What could a mod do though?  If it truly shares your cookies, the only way to combat it would be to disable cookies and make you sign in at all times.

The issue isn't with Neowin, cookies were designed to store your info for a site on your computer, if your cookie gets shared it's not the sites fault.  You need to complain to google, not neowin.

585880087[/snapback]

I think you need to understand that at the time of the first posting, I did not know it was Google!

This should be posted on the front page.

Grand Master

morficus

Posted
Posted
I think you need to understand that at the time of the first posting, I did not know it was Google!

This should be posted on the front page.

585880093[/snapback]

Agree :yes:

this is a HUGE issue.

this info should also be passed on to other forums as an attempt to avoid this stuff from happening.

Grand Master

mAcOdIn Veteran

Posted
  • Veteran
Posted

Considering how big the issue really is, I have a hard time seeing how it was ever greenlighted at all.

The interaction between a cookie and web page has been a relative standard for the internet for years, heck I think the idea's over 10 years old, and to make a tool that basically throws that out of the window was downright irresponsible of google.

I know it's beta, I know it's not for the mainstream and is basically damn near hidden on thier site but, crap, what was going through thier heads?

The person who came up with this idea should never be allowed to work on any network related program ever again, this is the worst judgement I've ever seen a company make on the internet.

Rising Star

tajddin

Posted
  • Author
Posted
Considering how big the issue really is, I have a hard time seeing how it was ever greenlighted at all.

The interaction between a cookie and web page has been a relative standard for the internet for years, heck I think the idea's over 10 years old, and to make a tool that basically throws that out of the window was downright irresponsible of google.

I know it's beta, I know it's not for the mainstream and is basically damn near hidden on thier site but, crap, what was going through thier heads?

The person who came up with this idea should never be allowed to work on any network related program ever again, this is the worst judgement I've ever seen a company make on the internet.

585880169[/snapback]

Very well said. As a software developer myself, I cannot comprehend how such a major issue would afflict a public beta. It's completely unacceptable.

This topic is now closed to further replies.
 Share
Go to topic listing

  • Recently Browsing   0 members

    • No registered users viewing this page.

  • Posts

    • VS Code 1.123 introduces massive upgrades for persistent AI developer workflows

      By binaryzero · Posted

      Niiice
    • Tor Browser 15.0.15

      By Copernic · Posted

      Tor Browser 15.0.15 by Razvan Serea Protect your privacy. Defend yourself against network surveillance and traffic analysis. Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. The Tor software protects you by bouncing your communications around a distributed network of relays run by volunteers all around the world: it prevents somebody from watching your Internet connection and learning what sites you visit, it prevents the sites you visit from learning your physical location, and it lets you access sites which are blocked. The Tor Browser Bundle lets you use Tor on Windows, Mac OS X, or Linux without needing to install any software. It can run off a USB flash drive, comes with a pre-configured web browser to protect your anonymity, and is self-contained. Tor Browser 15.0.15 changelog: All Platforms Updated NoScript to 13.6.20.1984 Updated Tor to 0.4.9.9 Bug tor-browser#42436: Allow for multiple configured (front, reflector) domain fronting pairs in Moat module Windows + macOS + Linux Bug tor-browser#44997: Captcha doesn't work in TB desktop Linux Bug tor-browser#44886: Backport tor-browser#44361: Notify Linux i686 users that they won't receive updates anymore Download: Tor Browser (64-bit) | Tor Browser (32-bit) | 109.0 MB (Open Source) View: Tor Browser Website | Other Operating Systems Get alerted to all of our Software updates on Twitter at @NeowinSoftware
    • AV2, successor to popular YouTube, Netflix, Amazon codec AV1, has a hard battle ahead

      By Nas · Posted

      Less disk space means less bandwidth demands which means lower operating costs for service providers... that's where money talks. ... cuz it's not about improving video quality!... that's just marketing spin.
    • AV2, successor to popular YouTube, Netflix, Amazon codec AV1, has a hard battle ahead

      By Nas · Posted

      And thereby lies the rub. AV1 support is not as wide as paid analysts would have the industry believe. With AV2 around the corner, it's going cause more time backlog in adoption (how many recent purchasers will upgrade yet-again within the next 6-12 months? most would rather stay pat for another 1+ years before even thinking about upgrading their setups).
    • Microsoft OneDrive is getting a simple yet much needed feature

      By hellowalkman · Posted

      Microsoft OneDrive is getting a simple yet much needed feature by Sayan Sen Microsoft has been steadily expanding OneDrive’s file management capabilities over the years, including for shared content and shortcuts, although it has had its flaws, too. The cloud storage platform introduced support for folder shortcuts several years ago, allowing users to pin frequently accessed shared folders from OneDrive, SharePoint, and Teams. Now, Microsoft is refining that experience further with a new way to organize those shortcuts as revealed in a recent Microsoft 365 roadmap addition. Previously, shortcuts added through the “Add shortcut to My files” option would appear alongside all other files and folders in the root of a user's OneDrive. And although it's meant to be useful, this approach could also create clutter along the way, especially for heavy users who may have to work with large numbers of shared folders across multiple projects and teams on their systems. This is where Microsoft’s latest feature comes in, as it is looking to address this inconvenience by giving users the option to place new shortcuts inside a dedicated “Shortcuts” folder instead. The feature is designed to keep shortcut links organized into a single location instead of scattering throughout the main OneDrive directory. Hence, the idea is to make navigation and usability easier and simpler. The first time a user chooses this option, OneDrive will automatically create the folder, and to help make it stand out from the other folders, the Shortcuts folder will have a distinct visual identity featuring a unique color and a building-style icon. That being said, the new Shortcuts will behave just like any other folder in OneDrive, and as such, users will be able to move it to a different location, rename it, share it with others, or remove it entirely if they prefer a different structure. You can view the entry on the Microsoft 365 roadmap website here. Currently, the feature is in the "in development" phase, but the tech giant expects the rollout to start next month (July 2026). Do keep in mind, though, that new feature rollouts often get delayed.

  • Recent Achievements

    • One Month Later
      B2Proxy earned a badge
      One Month Later
    • One Year In
      MadMung0 earned a badge
      One Year In
    • Week One Done
      jefred earned a badge
      Week One Done
    • Apprentice
      JoeyNeo went up a rank
      Apprentice
    • Week One Done
      oliviaexpo earned a badge
      Week One Done

  • Popular Contributors

    1. 1
      +primortal
      482
    2. 2
      PsYcHoKiLLa
      227
    3. 3
      Skyfrog
      71
    4. 4
      FloatingFatMan
      60
    5. 5
      Nick H.
      54
    Show More

  • Tell a friend

    Love Neowin? Tell a friend!