Loren Baker found a DigitalPoint thread exposing a potential security weakness in Google Video this week which could raise a legitimate privacy concern. Use the Google Video feature to “Post to my blog” and your password and login information are not protected. No https, no encryption, no SSL: they’re listed right in the headers.
In a nutshell, according to this user, Google is passing private information which includes MySpace, LiveJournal, Blogger, and TypePad login details over unsecure channels. And since Blogger accounts sometimes use Google Accounts for login, such a flaw could expose a user’s GMail, Google AdWords, Google AdSense, and maybe even Google Checkout information (unless this information is encrypted).
Also at Search Engine Journal today, a story on how privacy is Google’s new “click fraud.”
As one Digger pointed out, the Google Video problem is not what Google needed hitting the headlines this week, even if it is easily fixed.
Comments
Tag:
Google - Soft on Privacy?Beating The Unbeatable GoogleRetailers Panic Over Google Site SearchWhat Do You Think About Paid Links?Yahoo Patent Filing Sheds Light On PageRank Pay Per Click Party Over?Searching TV Shows with Google VideoGoogle Sacrifices Clicks To Increase Advertiser ROIGoogle Slams Paid Links? Good or Bad?Google Fear Hits AT&T Square In The Jaw
