republican-creole
Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Things you don't want Google to find...
Search Topic:
Uniqs:
2694
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Security Software Updates 18 February 2006 »
« OSX.Inqtana.A detected on Symantec.com  
page: 1 · 2
AuthorAll Replies


Khaine

join:2003-03-03
Australia
reply to antdude
Re: Things you don't want Google to find...

Maybe it is time that we require a licence before you can use a computer

*sigh*


bcool
Premium
join:2000-08-25
The Ozarks


1 edit
reply to zetan
said by zetan See Profile :

Then complain if someone comes along and pops one in.

ouch. I didn't see that metaphor coming...

To those who don't think so:
I think Google Desktop is a good idea. Perhaps its implementation needs a little retooling, I don't know. But it's silly to say that GDS is a bad idea. It can be a very useful tool.
--
"in flagrante delicto"


TerryMiller
Premium
join:2003-10-23

reply to jbob
said by jbob See Profile :

I'm not sure how anyone else feels but if Google was serving any personal/private data of mine, no matter how they got it, I think I might get me a lawyer and see about getting my personal/private data removed.
You'd have to go to the institution that exposed it first or it'd just get rediscovered. Don't forget the remaining search engines as well.

said by jbob See Profile :

Just because some inept admin allowed private data to be exposed for Google to cache doesn't make it alright for them to again open it for others to see.
If you asked them to remove it after the original data was removed and they refused then I'd agree with you.

said by jbob See Profile :

What would happen if Google cached some accidently exposed credit card info? Would they then wipe that data from their database or even be required to?
As stated earlier they didn't expose it. They just made it easier to find. You can build your own web crawler, there are even toolkits to do so. It's just easier and more efficient to use theirs.

OZO
Premium
join:2003-01-17

reply to jbob
said by jbob See Profile :

What would happen if Google cached some accidently exposed credit card info? Would they then wipe that data from their database or even be required to?
The answer would be simple - change that CC and sue those who have published your personal info.
What was published - remains so...
--
Keep it simple, it'll become complex by itself...


jbob
Reach Out and Touch Someone
Premium
join:2004-04-26
Little Rock, AR
·Comcast
·AT&T Southwest

reply to antdude
I'm not sure how anyone else feels but if Google was serving any personal/private data of mine, no matter how they got it, I think I might get me a lawyer and see about getting my personal/private data removed. Just because some inept admin allowed private data to be exposed for Google to cache doesn't make it alright for them to again open it for others to see. Now there might be some disagreements on what constitutes personal or private data however I would think things like salaries would be considered non grata by most. What would happen if Google cached some accidently exposed credit card info? Would they then wipe that data from their database or even be required to?

OZO
Premium
join:2003-01-17
reply to antdude
Don't blame the messenger...


SnowyOne
Premium
join:2003-04-05
Kailua, HI
·RoadRunner Cable
·Clearwire Wireless

reply to novaflare
said by novaflare See Profile :

Again its not googles jobs to protect inept admins and users of such things it is the admins and users jobs to protect their data.
--
That's true of the data that Google indexes & serves via it's search engine because it's data that already is/was available for public viewing (that's how Google got it in the first place), but this is a different animal altogether & has nothing to do with Google as we now know it. Despite any waivers in the TOS to the contrary, it will be Googles job to safeguard the servers as well as the data on them.
I'd agree that any admin transferring anything sensitive in this manner would be labelled "inept"


novaflare
The Dragon Was Here
Premium
join:2002-01-24
Barberton, OH

reply to antdude
How exactly would google even start to protect this information? By not browesing it in the first place? Ok good idea but payroll.xls hmm what about employchecks.xls or paycheck.xls or pckemp.xls or 1243wgths.xls ?

There are to many possible sensable names for employee data file names let alone random crap file names.

There for imo its not googles job to attempt to protect this sort of information by not allowing searches for it. Maybe in rare cases by request of a softwares programer(s) google could remove results or filter results. Such as we seen with phpbb and a few other website software titles. Even in these cases it is not googles responability to prevent searchers or their job. If google admins decide to block these results they do so as a favor to programer/company and nothing else.

I find it intresting that google has filtered phpbb results (index.php or what ever it was) They did not do this because it would make them money they did it by choice as a favor to the softwares authors and the softwares users to slow down the hacking that was going on of these boards.

Again its not googles jobs to protect inept admins and users of such things it is the admins and users jobs to protect their data.
--
DSLR security chat at us.ausirc.net chanel #dslr_sec lets pack this channelopen source dns server for *nix and windows »powerdns.com


Grail Knight
Who Dares Wins
Premium
join:2003-05-31
reply to mendsl2
That is a very good example.

Back to Google.

mendsl2

join:2003-10-16

reply to Grail Knight
I totally agree with you Grail Knight. Once your info is in the hands of another party they are responsible for keeping it secure. Here is a perfect example of this gone wrong:

»blogs.ittoolbox.com/security/inv···7568.asp

I feel it is clear that the newspaper is totally responsible for the release of sensitive data and that the customers had no control over this whatsoever.

Okay, back OT since this supposed to be about Google. ; )


Grail Knight
Who Dares Wins
Premium
join:2003-05-31
·Verizon Online DSL

reply to mendsl2
quote:
I feel that the holder of the data is responsible for securing said data no matter if it is an institution or Joe A. User.
I agree with that to an extent although without full access by a citizen to their data being held by some of those places of trust you have no control over. Example the release/sale of data that is mishandled, stolen etc.. I think you would have to be a mind reader or see into the future to do all you and the poster think a citizen should be able to do to prevent/contain privacy loss etc.

As to Google I could care less what they gather. All information is fair game to an Internet information gatherer. It is just doing what it was programmed to do.

-Greg
--
Fx Pacifica Branch, Tb Patrocles Branch, Fx Portable, Tb Portable All nightly builds.

mendsl2

join:2003-10-16

reply to Grail Knight
Growing pains. These types of situations help raise security awareness while pushing technology and security to another level. Sure that is a hard way to learn a lesson but it pushes people to become aware of the consequences of jacking their data in to the Web. Google is just doing its job and doing it quite well I might add.

Remember when ISPs didn't really filter any ports or services? Well maybe you remember Code Red or Nimda because that is what made those viruses so successful. So do you then blame Windows for providing NetBIOS services and tell Microsoft "they shouldn't do that"? The fact that people didn't fully understand the concept of Windows file sharing via TCP/IP is what made them vulnerable (and the bugs, code flaws and configuration issues). I am in no way plugging Windows file sharing or defending Microsoft's file sharing model here but merely providing another example of a situation that left peoples' sensitive data hanging in the breeze.

I feel that the holder of the data is responsible for securing said data no matter if it is an institution or Joe A. User.


hpguru
Curb Your Dogma
Premium
join:2002-04-12

reply to antdude
I agree that this is the user and/or the institutions fault if data which should have been inaccessible from the internet was not. One cannot blame Googlebot for following public links. After all, that is what it is supposed to do. These facts do not bestow anyone with a license to seek out and use such data for their own purposes however.
--
Get hpHOSTS! Member ASAP
hpHOSTS Online
Paranoia is no substitute for understanding.

Stumbles

join:2002-12-17
Port Saint Lucie, FL
reply to wapu
Easy answer...... users fault.


Grail Knight
Who Dares Wins
Premium
join:2003-05-31
·Verizon Online DSL


1 edit
reply to javaMan
What exactly are you getting at here?

quote:
If one doesn't want something to be seen by others on the network it doesn't belong there, it's that simple.
So information given to utilities, banks, filing for taxes, college, etc. ends up on the web it is because they wanted it there?

I think it is more like the mishandling of information by institutions is more prevalent then citizens just arbitrarily posting their private information on the web.

Edit* Corrected there not their.
--
Fx Pacifica Branch, Tb Patrocles Branch, Fx Portable, Tb Portable

All nightly builds.


zetan
Heart Of Steel
Premium
join:2003-11-22
Vallejo, CA

reply to wapu
said by wapu See Profile :

I showed this to a guy I work with and he started in on how google shouldn't do this. I take a different approach. I don't blame google, I blame the users who put that stuff out there. All Google does is find the data and present it when it is asked for. What do you guys think? Is it Googles responsibility to protect the data or is it the user's?
So you pull down your pants and bend over. Then complain if someone comes along and pops one in.

Google is not to blame for what can be found. Not IMHO.
--
No regrets.. ever.


Phucker
Premium
join:2001-09-12
Reno, NV
clubs:


1 edit
reply to antdude
Definitely the users responsibility.

Google didn't put it there.

They just make it easier to find
--
TBG/Drop File


packetscan
Premium
join:2004-10-19
Bridgeport, CT
clubs:
·Optimum Online

reply to wapu
said by wapu See Profile :

I showed this to a guy I work with and he started in on how google shouldn't do this. I take a different approach. I don't blame google, I blame the users who put that stuff out there. All Google does is find the data and present it when it is asked for. What do you guys think? Is it Googles responsibility to protect the data or is it the user's?
It's the users responsibility.

There is no question about that. ignorance is not bliss.. RTFM!

--
Who do you want to pay off today?


antiserious
The Future ain't what it used to be
Premium
join:2001-12-12
Scranton, PA

reply to antdude

... I don't want to become the Google Defender, but why lay all the blame at their feet when people behave stupidly ? ... if you're not smart enough, or you can't be bothered to secure your data, you shouldn't be surprised when someone else gets it ... I think Google Desktop is a bad idea, but I doubt that will stop anyone from using it ...

... as I said before, it's Evolution In Action ... and, as Jerry Springer proves every day, we will never run out of nitwits ...

--
... "Do You Know Where Your Towel Is ?" ...


ZOverLord
Premium
join:2003-10-20
Minneapolis, MN

reply to antdude
If the average person thinks that Spyware is less damaging than a Virus or Trojan then what makes people think those same people would see Google Desktop or other FREE services as anything more damaging than a pretty screen saver?
--
Black, Grey and White Hats Unite here -> »testing.OnlyTheRightAnswers.com
Forums » Up and Running » Security » SecuritySecurity Software Updates 18 February 2006 »
« OSX.Inqtana.A detected on Symantec.com  
page: 1 · 2


Saturday, 28-Nov 12:05:59 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [122] Time Warner Cable Fires Broadside At Broadcasters
· [112] New AT&T Ad Campaign Hits Back At Verizon
· [96] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [72] TiVo Sees Record Customer Losses
· [69] In-Flight Internet Headed For Bumpy Landing?
· [69] Verizon CEO: Hulu Will Be Dead Soon
· [62] Thanksgiving Open Thread
· [58] Weekend Open Thread
· [40] EFF Wages War On Fine Print
Most people now reading
· So we need a legitimate reason to use a lot of bandwidth? [TekSavvy]
· Windows 7 boot manager editing questions [Microsoft Help]
· Using AirMax to provide triple play services? [Wireless Service Providers]
· Using DIR-615 C1/3.01 with Trendnet TEW-652BRP in N Mode [D-Link]
· MagicJack Error Broken Storage [MagicJack]
· Once infected, Impossible to detect [Security]
· Why would I want an e reader? [General Questions]
· Is Gear Score now the new requirement to get pug invite? [World of Warcraft]