Google hid major Google+ security flaw that exposed users’ personal information

Google exposed the personal information of users of its Google+ social network, the company announced in a blog post this morning. The news, originally reported by The Wall Journal ahead of Google’s announcement, means that Google+ profile information like name, email address, occupation, gender, and age were exposed, even when that data was listed as private and not public. However, Google says that it has no evidence to suggest any third-party developers were aware of the bug or abused it. The bug appears to have been active between 2015 and 2018.

The company says it closed the bug in March 2018 shortly after learning of its existence. The WSJ reports that the company chose not to report it because of fear of “immediate regulatory…

Continue reading…

from The Verge – All Posts https://ift.tt/2Ofj2EE
via IFTTT