Ask HN: What's the actual fallout been from the Cloudflare bug?

Re:Ask HN: What's the actual fallout been from the Cloudflar... by i336_ on Sunday March 05, 2017 @05:06PM (#13799052)

I think Google freaked out to the Nth degree because it's quite likely that cached data is probably stored in a system that doesn't have [m]any security restrictions attached to it, and... well, there are >72k people. You're going to find well-meaning "what happens if I... OOPS" types (for any definition of "OOPS"), along with (ostensibly equally well-meaning) "hey, an OAuth token that actually works! Let's see just how far we can take this..." people... and then some that aren't just interested in fun engineering challenges, if you get what I mean.

I have no idea what Google employees have access to. I've always wondered whether they can hand-code their own MapReduce syntax over Google's actual Web index (I could find SO MANY THINGS if that were possible!). I wouldn't be surprised if the cache data <-> index were accessible to everyone who's been around for >6 months, so they can tinker with it.

But I guess the only reason I'm able to type this is that I haven't signed The Large Book Of NDAs (I presume it's large).

[ Parent | on HN ]

Re:Ask HN: What's the actual fallout been from the Cloudflar... by dorianm on Sunday March 05, 2017 @05:20PM (#13799143)

First NDA: Don't talk about NDAs

Second NDA: If it's not published on a Google domain, you have to make as abstract as it gets

[ Parent | on HN ]

Re:Ask HN: What's the actual fallout been from the Cloudflar... by i336_ on Sunday March 05, 2017 @05:33PM (#13799230)

A couple of relevant things I just thought of:

- http://www.goldsborough.me/google/internship/2016/11/18/01-5... - has some interesting tidbits; for example, I would not mind a visit to the Google Store :)

- https://www.reddit.com/r/Amd/comments/5x4hxu/we_are_amd_crea... - The last paragraph in this recent AMD AMA was a real "OH I get it now" eyeopener for me about NDAs and not announcing stuff AOT; tangentially related

[ Parent | on HN ]

Re:Ask HN: What's the actual fallout been from the Cloudflar... by jsmthrowaway on Monday March 06, 2017 @06:28AM (#13802008)

> I've always wondered whether they can hand-code their own MapReduce syntax over Google's actual Web index

Indexes, and yes, in a few ways. Some even have nice frontends. You actually have access to one of those.

[ Parent | on HN ]

Re:Ask HN: What's the actual fallout been from the Cloudflar... by i336_ on Monday March 06, 2017 @06:35AM (#13802028)

Thankyou so much :)

I know I've wondered a lot about this subject for a few years, but I can't remember anything at this exact moment (just got home from being out). If you feel like poking me (contact info in profile) from some sort of anonymous email, that would be awesome, I could get back to you.

[ Parent | on HN ]