Major Google Web Accelerator Security Issue


Recommended Posts

It seems that Google is expecting that every web page that asks for a login and password to be SSL secure.

Which just makes sense.

I understand that most forum software don't use SSL.. I don't know how feasible is that, but maybe they should.

Wow, now that's a beta issue if I've ever heard of one! :blink:

Well, this is definitely a slip in their QA procedures.

Their programmers are generally good though. Look at google.com, Gmail, Google Maps, and so on. :)

I'm not sure of what "conspiracy" you're talking about, when it has to do with users logging into forums with another guy's account?

585880380[/snapback]

Well, they have been hiring a boat-load of people in recent months. Might be beginning to fall under the "current structure doesn't fit that many workers" category.

WARNING!

Do NOT use any online/electronic/internet banking or credit card purchases with this 'web accellerator'. All the information that is needed tot deduce algorithms and the cardnumbers (including the security numbers) are present in the stored cache.

WARNING!

Do NOT use any online/electronic/internet banking or credit card purchases with this 'web accellerator'. All the information that is needed tot deduce algorithms and the cardnumbers (including the security numbers) are present in the stored cache.

585881200[/snapback]

If it's done on an HTTPS site, then it's not cached at all.

WARNING!

Do NOT use any online/electronic/internet banking or credit card purchases with this 'web accellerator'. All the information that is needed tot deduce algorithms and the cardnumbers (including the security numbers) are present in the stored cache.

585881200[/snapback]

WHAT???

Hopefully I don't use that junk...

But i'm sure that Google will be sued for this... I hope so...

Man... even if it's a stupid Beta...

It violate all privacy / security laws...

If it's done on an HTTPS site, then it's not cached at all.

585881227[/snapback]

But some sites... are retarded. UMB Bank has a way you can log in to your account minus all the HTTPS until your staring at your bank info...odd yet true. Hackers usually don't go after the "pot" of info without first getting slivers. Enough slivers presents a whole piece.

Most people for some reason become moronic when creating passwords to things later used for secure purposes/personal use. The odds of getting a forum password, versus that a bank.... As you know, the ideas are endless.

Beings that each time I post, no one posts after, yet reads.... oh well eh?

Doesn't surprise me, as with any new software they're going to be problems.

585881938[/snapback]

This is far more serious than some sort of "bug" that one would expect in pre-release (beta) software. Google decided to have the tool cache cookies. WHY? "For performance reasons". Bull****. There's no reason whatsoever to cache cookies from one machine and spread them to thousands of other machines. The whole concept of a cookie is to store unique information about a user or machine. Google has just made cookies a massive, worldwide security issue with this decision to "cache" (read: share) cookies.

Being a beta version isn't an excuse for such problems. Performance reasons isn't an excuse either. I believe they should remove this software from their page, untill they fix it and they remove the cookies remote caching "feature".

Edited by nickg78
Being a beta version isn't an excuse for such problems. Performance reasons isn't an excuse either. I believe they should remove this software from their page, untill they fix it and they remove the cookies remote caching "feature".

585882185[/snapback]

:yes: agree completely.

Where are the "ill follow Google into hell" fans now? i dont really buy this researchware stuff, spyware with a friendly name.

well Google made a bad bobo, they will fix it but broadband should be fast enough without it, do you really need it? you were fine before it

This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Looks a very subjective aren't they!? I like its simple design. I love the way Apple designs their products with function over form, minimalization, and simplicity over cluttered complex designs. Many, not all, of their products follow this trend, and the device becomes a tool rather than dominating the space. I do not however like their OS. I have never bought a Apple product, and while I'd consider the Neo for my wife, I am hoping there are better alternatives out there when her failing MacBook Pro 2017 finally stops. Fischer-Price is famously plastic, garish, and poorly made. Basically you're describing the Window Laptops the Neo competes against! This is how product design should be, and what Apple have often followed in recent years: https://tenprinciples.design/
    • Isn't that true for every codec? I remember having to buy a PCI MPEG-2 decoder card just so I could play DVDs on my computer back in the late 90s. AV1 support is still fairly new.
    • I'm no Apple fan, and have never bought an Apple product for myself. But I'd argue that where you think Apple is behind regarding an OLED display, that the vast majority of people out there wouldn't even know or care for an OLED. Apple have struck the balance well to create a price point that works, and I hope that PC manufactures, and Microsoft take notice. I'd argue that Asus will struggle to compete with the Neo BECAUSE they put in a more expensive OLED that many people won't actually notice with its deeper blacks. Most people wouldn't care either that their screen is stuck at 60Hz! When I bought a 4k monitor (future proof and for the space), my laptop could only push that out at 30Hz, and it worked fine for my needs for 1.5 years! Heck, the average human eye can't see more than 90Hz in many situations!! So while they are trying to differentiate themselves, and it may well gain them a few customers, for the most part, I think they're missing the point of what the Neo is for.
    • I disagree. Boomer execs only want one thing; money money money. The original fans of the series want a specific reboot that focuses on the vibe and feel of the original series. Boomers don't want that because then they can't have a 8 to 9 figure return. This was canceled because of greed. 
    • Meta rolls out Meta Business Agent globally on WhatsApp, Instagram, and Messenger by David Uzondu Image via Meta Meta is expanding Meta Business Agent, a feature that the social media giant promises will help businesses deliver "personalized experiences for customers using AI," launching the tech globally. Before this global release, Meta Business Agent used to be a free test called "Business AI" during a testing phase that started in October 2024. Meta picked India, Mexico, and Brazil to test the software, gathering data from over one million active shops that used the chat tools. The agent works on WhatsApp, Instagram, and Messenger, helping shops answer customer questions, check incoming leads, book appointments, and recommend products from a catalog. Meta said that the business agent can match your brand's unique tone when speaking to customers, and that it plans to improve the feature to handle "daily operations" like market research, product insights, calendars, and rival research. Soon, users will find these AI-supported shops easily by typing names in the WhatsApp search bar. Image via Meta Apart from the Business Agent, Meta is also introducing the Meta Business Agent Platform, a new agentic platform that provides the infrastructure needed to build, customize, and run virtual helpers at scale. With the Platform, companies link their bots to services like Shopify, Zendesk, and Shopee using firm-level controls, guardrails, and metrics to define strict rules. This setup lets coders build custom behaviors, keeping customers happy with direct answers. Speaking of agents, you might have heard that hackers recently broke into Instagram accounts by simply asking the Meta AI support assistant on the mobile app to hand over control. You can check out our coverage on that here.
  • Recent Achievements

    • One Month Later
      B2Proxy earned a badge
      One Month Later
    • One Year In
      MadMung0 earned a badge
      One Year In
    • Week One Done
      jefred earned a badge
      Week One Done
    • Apprentice
      JoeyNeo went up a rank
      Apprentice
    • Week One Done
      oliviaexpo earned a badge
      Week One Done
  • Popular Contributors

    1. 1
      +primortal
      485
    2. 2
      PsYcHoKiLLa
      228
    3. 3
      Skyfrog
      70
    4. 4
      FloatingFatMan
      58
    5. 5
      neufuse
      56
  • Tell a friend

    Love Neowin? Tell a friend!