News for hackers. Stuff that matters.

A comment on Google Exposed User Data, Feared Repercussions of Disclosing to Public. Parent comment

Re:Google Exposed User Data, Feared Repercussions of Disclos... by notatoad on Monday October 08, 2018 @01:57PM (#18169697)
a vulnerability that allows some unauthorized access to user data via the API and a vulnerability that allows edting logs are very different types of vulnerabilities.
[ Parent | on HN ]
Re:Google Exposed User Data, Feared Repercussions of Disclos... by craftyguy on Monday October 08, 2018 @02:03PM (#18169754)
Well, the comment I was responding to didn't specify:

> Company finds a security vulnerability caused by a bug

Remote execution vulnerabilities do exist..

[ Parent | on HN ]
Re:Google Exposed User Data, Feared Repercussions of Disclos... by puzzle on Monday October 08, 2018 @05:41PM (#18171574)
The logs live somewhere else. If you had some magic exploit that let you run code on Google systems AND delete logs, you could do much more damaging things than just reading G+ data.
[ Parent | on HN ]