CEO Eric Schmidt's remarks are being taken out of context, the company says.
"The context in which Eric answered this question was clear," said a Google spokesperson in an e-mailed statement. "He was talking about the US Patriot Act. The [CNBC] documentary later made clear the lengths to which Google goes to inform and empower users about privacy-related concerns, including creating a dashboard in which users can review and control data in their Google accounts."
Google has made, and continues to make privacy missteps, such as arguing last year that California law didn't require a privacy link on its home page and rolling out its Street View service around the world without enough outreach to communities and regulators.
In Italy, four Google executives face a possible jail sentence, if convicted, for failing to prevent a video depicting the bullying of a teen with Down Syndrome from being posted briefly on the Italian YouTube.
Google however is not the only company raked over the coals of privacy. Facebook this week, having apparently learned nothing from its Beacon fiasco, just asked its 350 million users to revisit their privacy settings while supporting settings that would share more rather than less information. And among other companies, there are even greater privacy problems.
If Google users care, they have not shown it in large numbers. The company continues to grow and thrive.
Google has repeatedly said that its business depends on user trust and has taken steps to enhance users' privacy, such as the Privacy Dashboard cited by Google's spokesperson.
Another such step was revealed earlier this week when Google VP of engineering Vic Gundotra said that this company had decided not to implement facial recognition for its Google Goggles service, which allows searchers to identify certain objects -- or apparently certain people -- by taking a picture of the object with a mobile phone. Gundotra said the company wants to understand the privacy implications more thoroughly.
Published: 2014-09-02 S3QL 1.18.1 and earlier uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object in (1) common.py or (2) local.py in backends/.
Published: 2014-09-02 Cross-site scripting (XSS) vulnerability in CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted reference element within a nonXMLBody element.
Published: 2014-09-02 CDA.xsl in HL7 C-CDA 1.1 and earlier allows remote attackers to discover potentially sensitive URLs via a crafted reference element that triggers creation of an IMG element with an arbitrary URL in its SRC attribute, leading to information disclosure in a Referer log.
Published: 2014-09-02 The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework.
Published: 2014-09-02 Cross-site scripting (XSS) vulnerability in Innovative Interfaces Sierra Library Services Platform 1.2_3 allows remote attackers to inject arbitrary web script or HTML via unspecified parameters.
This episode of Dark Reading Radio looks at infosec security from the big enterprise POV with interviews featuring Ron Plesco, Cyber Investigations, Intelligence & Analytics at KPMG; and Chris Inglis & Chris Bell of Securonix.