Major Google Web Accelerator Security Issue


Recommended Posts

The bug sounds a lot worse than it is. You're not logged in as anybody, it's simply the cached page that you're seeing. You cannot perform actions as the user that you may see:

http://news.com.com/Google+speed+bump+draw..._3-5698447.html

And no - you don't have to worry about your banking information or anything like that being seen by anybody. Banking is always done over HTTPS, and google couldn't see that stuff even if they wanted to.

Where are the "ill follow Google into hell" fans now? i dont really buy this researchware stuff, spyware with a friendly name.

well Google made a bad bobo, they will fix it but broadband should be fast enough without it, do you really need it? you were fine before it

585884442[/snapback]

I couldn't agree more. :yes:

I was curious to see this so called speed improvement, so I installed it on another computer only for 15 minutes. It said that there was 1 second of speed improvement within 15 minutes of browsing. :woot:

Improvement of 1 second, but all your cookies and personal data exposed to other people. Does it worth? :no:

Not only that, but if programmers designed their applications properly, there wouldn't be any problems anyway. Google's WA uses standard HTTP headers to determine the status of whether a page can be served from cache or should be retrieved again. If somebody's privacy is somehow exposed, it ultimately *is* a bug that the host application should address by properly sending the Cache-Control HTTP headers, including the last-updated status of the page.

Why are people installing this anyway? Do people on broadband really need more speed? I agree that this is a HUGE bug, but come on, these web accelerators never do what they claim.

585882031[/snapback]

Agreed. If, and only IF it speeded things up, the speed would be so negligable that any memory/resources the app used were being wasted. Maybe Google Inc. are testing the waters to see how dumb people really are, and what crap they'll voluntarily install on their systems. :p

It really appears that absolutely nobody has read that this isn't as big of an issue as the users in this thread have made it out to be....

585886386[/snapback]

What do you mean.

I've seen screenshots of peoples PM's being read... via the cache.

This is defiantely a bigger issue then your playing it down to be.

Their sessions might not be stolen... but I've seen screenshots of cached PM inboxes, with their PM's viewable.

585887696[/snapback]

*nod* The programmers should fix their applications, then. It's not Google's fault if web applications aren't following standard HTTP protocols.

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Here is the new Surface Laptop Ultra wallpaper in high resolution by Taras Buria Earlier this week, Microsoft announced the Surface Laptop Ultra, its brand-new high-end laptop powered by NVIDIA's brand-new RTX Spark processor. As usual, Microsoft gives each new device a unique wallpaper, and the Surface Laptop Ultra is no exception. While the device is not publicly available yet, somebody has already extracted its wallpaper, giving everyone a chance to get a piece of the upcoming laptop in its full-resolution glory. The Surface Laptop Ultra has a very dark, abstract wallpaper that resembles the stock wallpapers in Windows Server, albeit with much less color. Having this dark, grim wallpaper highlights the laptop's mini-LED display and its ability to cut off parts of the screen's backlight to achieve OLED-like black levels. However, if you also like light wallpapers, we made a white version by simply inverting its colors. You can download both wallpapers below (click the image, right-click it, and select "Save as"): The Surface Laptop Ultra is expected to launch later this year. Microsoft is not revealing full details yet, including the price. However, Microsoft confirmed up to 1 petaflop of AI performance and RTX 5070-level of GPU performance. The heart of the laptop has up to 20 CPU cores and 6,144 GPU cores. Additionally, Microsoft and NVIDIA boast high CPU efficiency for all-day battery life. As for the display, it is a 15-inch mini-LED display with a pixel density of 262 ppi and a maximum brightness of 2,000 nits. Of course, not everyone needs this amount of power, and certainly not everyone can afford it. For those who need a more affordable device, Microsoft is also preparing the next-generation Surface Pro powered by the Snapdragon X2 Elite processor. Weeks ahead of the announcement, details about this computer were leaked by a retailer. Do you like the Surface Laptop Ultra's stock wallpaper? Share your thoughts in the comments. Image provided by @nextgenos2026 on X
    • From all that I've read on the subject--not that much, really--it looks to me like companies and parents are trying to protect themselves from children using their parents accounts to run up giant bills, sometimes in the thousands of dollars, and the first the parents know about it is when they get sued... Internet companies have been sued for tailoring their ads to children, which is kind of old news. My belief is that policing starts at home with the parents, and the reason that so many laws that can't be enforced are being passed is because parents are eschewing their responsibilities, claiming not enough time, not enough knowledge, etc. Giving kids cell phones sans Internet connectivity is a good place to start--confine Internet activity to PCs in the home that the parents regulate. My kids are all grown and gone, I'm happy to say... They have their own kids to worry about.
    • ChartNet’s 1.7 million synthetic samples let compact open-source models outperform GPT-4o on every chart task   A team from MIT and the MIT-IBM Computing Research Lab has built a training dataset that solves one of the most persistent gaps in enterprise AI: the inability of even the best commercial models to reliably read a chart...... https://www.techtimes.com/articles/317752/20260604/ai-chart-understanding-breakthrough-mit-ibm-dataset-lets-small-models-beat-gpt-4o.htm  
    • BTW DXVK is also available on Windows and offers similar benefits like on Linux when it comes to performance, at least in some titles. The Raceroom racing sim for example even offers DXVK as one of its officially supported options and it can achieve ridiculous improvements in certain situations, like quite literally doubling (or more) the framerates
  • Recent Achievements

    • One Month Later
      nothanks earned a badge
      One Month Later
    • One Month Later
      B2Proxy earned a badge
      One Month Later
    • One Year In
      MadMung0 earned a badge
      One Year In
    • Week One Done
      jefred earned a badge
      Week One Done
    • Apprentice
      JoeyNeo went up a rank
      Apprentice
  • Popular Contributors

    1. 1
      +primortal
      476
    2. 2
      PsYcHoKiLLa
      232
    3. 3
      Skyfrog
      79
    4. 4
      FloatingFatMan
      68
    5. 5
      Michael Scrip
      58
  • Tell a friend

    Love Neowin? Tell a friend!