Risk
12/11/2009
03:45 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Google Douses Privacy Fire

CEO Eric Schmidt's remarks are being taken out of context, the company says.

"The context in which Eric answered this question was clear," said a Google spokesperson in an e-mailed statement. "He was talking about the US Patriot Act. The [CNBC] documentary later made clear the lengths to which Google goes to inform and empower users about privacy-related concerns, including creating a dashboard in which users can review and control data in their Google accounts."

Google has made, and continues to make privacy missteps, such as arguing last year that California law didn't require a privacy link on its home page and rolling out its Street View service around the world without enough outreach to communities and regulators.

In Italy, four Google executives face a possible jail sentence, if convicted, for failing to prevent a video depicting the bullying of a teen with Down Syndrome from being posted briefly on the Italian YouTube.

Google however is not the only company raked over the coals of privacy. Facebook this week, having apparently learned nothing from its Beacon fiasco, just asked its 350 million users to revisit their privacy settings while supporting settings that would share more rather than less information. And among other companies, there are even greater privacy problems.

If Google users care, they have not shown it in large numbers. The company continues to grow and thrive.

Google has repeatedly said that its business depends on user trust and has taken steps to enhance users' privacy, such as the Privacy Dashboard cited by Google's spokesperson.

Another such step was revealed earlier this week when Google VP of engineering Vic Gundotra said that this company had decided not to implement facial recognition for its Google Goggles service, which allows searchers to identify certain objects -- or apparently certain people -- by taking a picture of the object with a mobile phone. Gundotra said the company wants to understand the privacy implications more thoroughly.



Previous
2 of 2
Next
Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Tech Digest, Dec. 19, 2014
Software-defined networking can be a net plus for security. The key: Work with the network team to implement gradually, test as you go, and take the opportunity to overhaul your security strategy.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2014-9676
Published: 2015-02-27
The seg_write_packet function in libavformat/segment.c in ffmpeg 2.1.4 and earlier does not free the correct memory location, which allows remote attackers to cause a denial of service ("invalid memory handler") and possibly execute arbitrary code via a crafted video that triggers a use after free.

CVE-2014-9682
Published: 2015-02-27
The dns-sync module before 0.1.1 for node.js allows context-dependent attackers to execute arbitrary commands via shell metacharacters in the first argument to the resolve API function.

CVE-2015-0655
Published: 2015-02-27
Cross-site scripting (XSS) vulnerability in Unified Web Interaction Manager in Cisco Unified Web and E-Mail Interaction Manager allows remote attackers to inject arbitrary web script or HTML via vectors related to a POST request, aka Bug ID CSCus74184.

CVE-2015-0884
Published: 2015-02-27
Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a Trojan horse application with a name composed of an initial substring of a path that contains a space character.

CVE-2015-0885
Published: 2015-02-27
checkpw 1.02 and earlier allows remote attackers to cause a denial of service (infinite loop) via a -- (dash dash) in a username.

Dark Reading Radio
Archived Dark Reading Radio
How can security professionals better engage with their peers, both in person and online? In this Dark Reading Radio show, we will talk to leaders at some of the security industry’s professional organizations about how security pros can get more involved – with their colleagues in the same industry, with their peers in other industries, and with the IT security community as a whole.