Risk

11/3/2010
01:33 PM
Connect Directly
Google+
LinkedIn
Twitter
RSS
E-Mail
50%
50%

Google Settles Buzz Lawsuit

The company will set aside $8.5 million to fund privacy education, but Gmail users will not be compensated.

Google began sending messages to Gmail users in the U.S. on Tuesday to provide notification that it had reached a settlement in the Buzz class action lawsuit.

The launch of Google's Buzz social networking service in February prompted a privacy outcry and subsequent lawsuits, which were aggregated into a class action.

Google made a series of changes to its service to address complaints that Buzz exposed private and potentially sensitive Gmail contacts. These included making choices about followers and following more visible, moving to an auto-suggest model rather than automatic following, and the addition of Buzz to the Google Dashboard to make it easier to see one's Buzz settings.

The settlement does not include an admission of error or any compensation for Gmail users. Rather it acknowledges the changes Google made in its service to address complaints and commits $8.5 million, less legal fees, to be directed to "organizations promoting privacy education and policy on the Web," as Google puts it in its letter.

Those seeking compensation have to opt-out of the settlement before the December 6 deadline, file a separate lawsuit, and win in court.

As a result of a separate privacy snafu -- the company's inadvertent gathering of WiFi packet data through its Street View cars -- Google last week made a significant commitment to improve its approach to privacy by adding a new director of privacy to oversee product management, implementing additional process controls and auditing, and adding further privacy education for employees.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
More Than Half of Users Reuse Passwords
Curtis Franklin Jr., Senior Editor at Dark Reading,  5/24/2018
Is Threat Intelligence Garbage?
Chris McDaniels, Chief Information Security Officer of Mosaic451,  5/23/2018
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: This comment is waiting for review by our moderators.
Current Issue
Flash Poll
[Strategic Security Report] Navigating the Threat Intelligence Maze
[Strategic Security Report] Navigating the Threat Intelligence Maze
Most enterprises are using threat intel services, but many are still figuring out how to use the data they're collecting. In this Dark Reading survey we give you a look at what they're doing today - and where they hope to go.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2018-11471
PUBLISHED: 2018-05-25
Cockpit 0.5.5 has XSS via a collection, form, or region.
CVE-2018-11472
PUBLISHED: 2018-05-25
Monstra CMS 3.0.4 has Reflected XSS during Login (i.e., the login parameter to admin/index.php).
CVE-2018-11473
PUBLISHED: 2018-05-25
Monstra CMS 3.0.4 has XSS in the registration Form (i.e., the login parameter to users/registration).
CVE-2018-11474
PUBLISHED: 2018-05-25
Monstra CMS 3.0.4 has a Session Management Issue in the Administrations Tab. A password change at admin/index.php?id=users&action=edit&user_id=1 does not invalidate a session that is open in a different browser.
CVE-2018-11475
PUBLISHED: 2018-05-25
Monstra CMS 3.0.4 has a Session Management Issue in the Users tab. A password change at users/1/edit does not invalidate a session that is open in a different browser.