News for hackers. Stuff that matters.

A comment on Google Exposed User Data, Feared Repercussions of Disclosing to Public. Parent comment

Re:Google Exposed User Data, Feared Repercussions of Disclos... by tptacek on Monday October 08, 2018 @06:44PM (#18171966)
I have no idea, but another thing to consider is that they probably have longer-term access to the binaries of all the applications that ever used this API, and they certainly have tools for automated/large-scale inspection of applications.
[ Parent | on HN ]
Re:Google Exposed User Data, Feared Repercussions of Disclos... by joshuamorton on Monday October 08, 2018 @11:35PM (#18173133)
One obvious example is that you can continue monitoring for evidence of attempts to use the vulnerability. A delayed honeypot, so to speak.

In other words, you don't have evidence that this vulnerability wasn't abused in 2 weeks, you have evidence that no one abused it in ~6 months. Still not perfect, but a more compelling argument that it wasn't abused.

[ Parent | on HN ]