Language Selection

English French German Italian Portuguese Spanish

Google+ and Hyper-Threading (Intel) Compromised

Filed under
Google
Hardware
Security
  • Project Strobe: Protecting your data, improving our third-party APIs, and sunsetting consumer Google+

    Many third-party apps, services and websites build on top of our various services to improve everyone’s phones, working life, and online experience. We strongly support this active ecosystem. But increasingly, its success depends on users knowing that their data is secure, and on developers having clear rules of the road.

  • Google+ Is Shutting Down After Data Breach

    Google has decided to shut down the consumer version of its failed social network Google+. This news comes in the wake of a previously undisclosed security flaw that exposed the data of the profile of users.

    The bug in question remained active between 2015 and 2018, and Google discovered it in March; during this period, the flaw affected more than 500,000 users. However, Google claims to have no evidence that suggests that any external developer or app had access to the data.

  • Google Concealed Data Breach Over Fear Of Repercussions; Shuts Down Google+ Service

    Google opted in the Spring not to disclose that the data of hundreds of thousands of Google+ users had been exposed because the company says they found no evidence of misuse, reports the Wall Street Journal. The Silicon Valley giant feared both regulatory scrutiny and regulatory damage, according to documents reviewed by the Journal and people briefed on the incident.

    In response to being busted, Google parent Alphabet is set to announce broad privacy measures which include permanently shutting down all consumer functionality of Google+, a move which "effectively puts the final nail in the coffin of a product that was launched in 2011 to challenge Facebook, and is widely seen as one of Google's biggest failures."

  • Google+ is Dead, Survived By Better Privacy Controls

    Earlier this year, Google started a project to review third-party developer access to Google accounts through the use of APIs. It found a security breach surrounding Google+, and is now shutting the service down, at least for consumers.

    The long and short of the issue is that there was a security hole that allowed third-party developers to access Google+ users’ account data, including name, email address, occupation, gender, and age—even if the account was set as private.. This isn’t particularly sensitive data, but regardless, a breach is a breach.

    The bug was discovered in March of 2018, but was presumed to have been open since sometime in 2015. To make matters slightly more troubling, Google only keeps this particular API’s data log for two weeks…so the company has no way of knowing which users were affected. Presumably, however, some 500,000 users were on the list.

  • How does TLBleed abuse the Hyper-Threading feature in Intel chips?

    A new side-channel attack called TLBleed abuses the Hyper-Threading feature of Intel chips. Researchers say there is a high success rate of TLBleed exploits, but Intel currently has no plans to patch it. How does TLBleed work, and what are the risks of not patching it?

More on Google+

Comment viewing options

Select your preferred way to display the comments and click "Save settings" to activate your changes.

More in Tux Machines

5 Open Source 2D Animation Software to Use

An animation software is a special program that’s used to design a moving animation out of the objects required. Traditional painting/drawing software (Like Inkscape) do not support creating animation, as they are used just to make the objects or paint them, but they do not have some necessary capabilities to create a moving animation out of those objects/images/photos, such as tweeing, rotoscoping, motion capture, VFX & simulation support. If you are someone who’s interested in creating 2D animation, whether as a hobby or part of your job, then you would be glad to know that there are many open source 2D animation software to use. In this article we’ll see 5 of them. Read more

LG buddies up with Qt to expand webOS in autos, smart home, and robots

The Qt Company and LG are collaborating to integrate LG’s Linux-based webOS Open Source Edition with the Qt development platform for automotive, smart home, and robotics. The Qt Company announced “a significant expansion of its long-standing partnership” with LG Electronics to extend the reach of the webOS Open Source Edition, which LG launched in early 2018. The Qt Company will work with LG to release webOS with the cross-platform Qt SDK and related GUI and development tools to offer “the most comprehensive operating system for smart devices in the automotive, robotics and smart home sectors,” says the Qt Company. Other potential applications are said to include AI, connectivity, media and content services, and automation. “Qt will play a key role in the development of webOS Auto, planned for deployment in future automotive infotainment systems,” says LG. In addition, webOS will officially become a Qt reference OS of Qt, with full support for the distribution within Qt Creator, Qt Design Studio, Qt 3D Studio, and related Qt software. The goal is to make webOS with Qt “the platform of choice for embedded smart devices.” Read more

Android Leftovers

SUSE Manager 4: Traditional server management marries DevOps

Managing Linux servers has never been easy. Programs like Cockpit, cPanel, and Webmin use a GUI to make it simpler to handle common sysadmin tasks. But, with servers moving from the racks in your server room to the cloud and the edge and the Internet of Things (IoT), we need more. That's where DevOps comes in. And now programs like the new SUSE Manager 4 combine the best of both sysadmin approaches. Daniel Nelson, SUSE VP of products and solutions, explained in a statement: "SUSE Manager manages physical, virtual, and containerized systems across edge, core, and cloud environments, all from a single centralized console. It's part of the IT transformation that lowers costs, reduces complexity, and boosts business agility." Read more