Major Google Web Accelerator Security Issue


Recommended Posts

It seems that Google is expecting that every web page that asks for a login and password to be SSL secure.

Which just makes sense.

I understand that most forum software don't use SSL.. I don't know how feasible is that, but maybe they should.

Wow, now that's a beta issue if I've ever heard of one! :blink:

Well, this is definitely a slip in their QA procedures.

Their programmers are generally good though. Look at google.com, Gmail, Google Maps, and so on. :)

I'm not sure of what "conspiracy" you're talking about, when it has to do with users logging into forums with another guy's account?

585880380[/snapback]

Well, they have been hiring a boat-load of people in recent months. Might be beginning to fall under the "current structure doesn't fit that many workers" category.

WARNING!

Do NOT use any online/electronic/internet banking or credit card purchases with this 'web accellerator'. All the information that is needed tot deduce algorithms and the cardnumbers (including the security numbers) are present in the stored cache.

WARNING!

Do NOT use any online/electronic/internet banking or credit card purchases with this 'web accellerator'. All the information that is needed tot deduce algorithms and the cardnumbers (including the security numbers) are present in the stored cache.

585881200[/snapback]

If it's done on an HTTPS site, then it's not cached at all.

WARNING!

Do NOT use any online/electronic/internet banking or credit card purchases with this 'web accellerator'. All the information that is needed tot deduce algorithms and the cardnumbers (including the security numbers) are present in the stored cache.

585881200[/snapback]

WHAT???

Hopefully I don't use that junk...

But i'm sure that Google will be sued for this... I hope so...

Man... even if it's a stupid Beta...

It violate all privacy / security laws...

If it's done on an HTTPS site, then it's not cached at all.

585881227[/snapback]

But some sites... are retarded. UMB Bank has a way you can log in to your account minus all the HTTPS until your staring at your bank info...odd yet true. Hackers usually don't go after the "pot" of info without first getting slivers. Enough slivers presents a whole piece.

Most people for some reason become moronic when creating passwords to things later used for secure purposes/personal use. The odds of getting a forum password, versus that a bank.... As you know, the ideas are endless.

Beings that each time I post, no one posts after, yet reads.... oh well eh?

Doesn't surprise me, as with any new software they're going to be problems.

585881938[/snapback]

This is far more serious than some sort of "bug" that one would expect in pre-release (beta) software. Google decided to have the tool cache cookies. WHY? "For performance reasons". Bull****. There's no reason whatsoever to cache cookies from one machine and spread them to thousands of other machines. The whole concept of a cookie is to store unique information about a user or machine. Google has just made cookies a massive, worldwide security issue with this decision to "cache" (read: share) cookies.

Being a beta version isn't an excuse for such problems. Performance reasons isn't an excuse either. I believe they should remove this software from their page, untill they fix it and they remove the cookies remote caching "feature".

Edited by nickg78
Being a beta version isn't an excuse for such problems. Performance reasons isn't an excuse either. I believe they should remove this software from their page, untill they fix it and they remove the cookies remote caching "feature".

585882185[/snapback]

:yes: agree completely.

Where are the "ill follow Google into hell" fans now? i dont really buy this researchware stuff, spyware with a friendly name.

well Google made a bad bobo, they will fix it but broadband should be fast enough without it, do you really need it? you were fine before it

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • I found that stability back then was really down to the motherboard manufacturer. Back then i stuck with Microstar motherboards and VIA chipsets as they were ultra reliable. Most stuff was done with jumpers and left little room for user created problems 👍
    • Yes, Scoop was created to promote Coreutils for Windows. You can still see early versions of their website on the Web Archive. It was a joke that nobody took seriously. Microsoft's implementation of Coreutils, however, are built in Rust.
    • Looks like EA's Star Wars Zero Company will be out this August by Pulasthi Ariyasinghe Over a year ago, EA surprise announced that a team of former Firaxis members is working on a brand-new Star Wars game. Dubbed Zero Company, the title would have XCOM-like turn-based tactics gameplay as players manage a squad of professionals from all over the galaxy. Now, just ahead of an official announcement, it looks like the release date has leaked out. The upcoming Summer Game Fest presentation on Friday is when EA is supposed to show off the title's gameplay footage, with fans also expecting it to reveal a release date. However, the ever-reliable billbil-kun from Dealabs says they have already managed to find out when the game is coming out and what versions fans will have the option of purchasing. Per the leak, Star Wars Zero Company has an August 27, 2026, release date attached to it. The title is slated to release on PC, Xbox Series X|S, and PlayStation 5 with a $49.99 standard and $59.99 Deluxe edition. The leaker also adds that there won't be any early access perk attached to this special edition. Pre-orders could kick off alongside the official announcement this Friday, too. For those unfamiliar with the title, Bit Reactor is developing Star Wars Zero Company with help from Respawn Entertainment and Lucasfilm Games. The EA-published title is said to be set during the "twilight of the Clone Wars." We will have to wait and see if base building and management mechanics from the XCOM series will be present here, too. "You will step into the shoes of Hawks, a former Republic officer who leads Zero Company — an unconventional outfit of professionals for hire hailing from across the galaxy," reads the game description. "Hawks and Zero Company are recruited for an operation that pits them against an emerging threat that will consume the galaxy if left unchecked. To succeed, Hawks will lead a team of uneasy allies who must set aside their differences to overcome nearly impossible odds." You can catch the Star Wars Zero Company extended gameplay reveal at the Summer Game Fest showcase that's kicking off on Friday at 2 pm PT / 5 pm ET.
    • All their other games always had a new cast and new story, so that's not very surprising. The new dev is worrisome though.
  • Recent Achievements

    • One Month Later
      nothanks earned a badge
      One Month Later
    • One Month Later
      B2Proxy earned a badge
      One Month Later
    • One Year In
      MadMung0 earned a badge
      One Year In
    • Week One Done
      jefred earned a badge
      Week One Done
    • Apprentice
      JoeyNeo went up a rank
      Apprentice
  • Popular Contributors

    1. 1
      +primortal
      488
    2. 2
      PsYcHoKiLLa
      233
    3. 3
      Skyfrog
      78
    4. 4
      FloatingFatMan
      67
    5. 5
      Michael Scrip
      58
  • Tell a friend

    Love Neowin? Tell a friend!