Senators Demand Google Hand Over Internal Memo Urging Google+ Cover-Up

Re:Senators Demand Google Hand Over Internal Memo Urging Goo... by tptacek on Monday October 15, 2018 @02:32PM (#18222330)

Rarely is it ever the case that you can conclusively rule out exploitation (ever) of a discovered vulnerability. Most of the time, companies don't even check; they fix the problem and get on with their lives. That Google even bothered to figure out the limits of what they could conclude about the vulnerability is already above the standard response in the industry.

[ Parent | on HN ]

Re:Senators Demand Google Hand Over Internal Memo Urging Goo... by thisacctforreal on Monday October 15, 2018 @03:16PM (#18222766)

How do you feel about the log retention period?

[ Parent | on HN ]

Re:Senators Demand Google Hand Over Internal Memo Urging Goo... by tptacek on Monday October 15, 2018 @04:15PM (#18223275)

I don't care about the log retention period. My assumption is that Google does a better job of real-time log monitoring than most other tech firms, and that they are between a rock and a hard place with respect to retention owing to privacy concerns. Either way: it's simply not a real-world norm to conduct a forensics investigation after the internal discovery a vulnerability, so any work they did in that regard easily clears the industry bar.

[ Parent | on HN ]