News for hackers. Stuff that matters.

Ask HN: What if gmail was compromised?

I vaguely remember years ago reading a hypothetical post about what would happen if gmail was shipped with a vulnerability that disabled password check. And essentially it would lead to the world ending.

The author's claim was that it might not be so farfetched because there was a time when dropbox shipped a version with the password check disabled.

I was hoping someone would remember it and or link it.

Or failing that, what are people's thoughts on what would happen if such a vulnerability was shipped today.

( 14 comments | 10 points | on HN )
Re:Ask HN: What if gmail was compromised? by hkai on Thursday November 01, 2018 @01:18PM (#18356212)
It's actually on my TODO list to write a book about that.

The idea being:

- Every geographic location you ever visited, every password, every google search you made is now available to anyone publicly, with a convenient web search interface.

- People are digging through your data to figure out that you visited this brothel in Thailand, or googled the N-word back in 2009, and activists will send that information to your employer, friends and family. Every query you entered on a porn site. Every time you bought drugs online. Every comment you left on any site. Every sex toy you bought. Every photo you thought was deleted. Everything.

- Finally, the hacktivists who performed this selectively left out roughly 50% of the data, the data of the people who are on "their side", their supporters, and included only the data of the groups they don't like.

Re:Ask HN: What if gmail was compromised? by clubm8 on Friday November 02, 2018 @09:22PM (#18368105)
>People are digging through your data to figure out that you visited this brothel in Thailand, or googled the N-word back in 2009, and activists will send that information to your employer, friends and family. Every query you entered on a porn site. Every time you bought drugs online. Every comment you left on any site. Every sex toy you bought. Every photo you thought was deleted. Everything.

I think I'd have herd immunity - my "indiscretions" are fairly benign, and I think the outcome would be everyone collectively decides not to judge each other for what in the grand scheme of things are mild and private matters.

Re:Ask HN: What if gmail was compromised? by deanmoriarty on Thursday November 01, 2018 @11:55PM (#18360595)
This was so scary and well written, I applaud your style.

Do you know if there is some similar material to what you’re describing online? I’m not talking about the leaks themselves, just stories/books about these distopian scenarios.

Re:Ask HN: What if gmail was compromised? by nf05papsjfVbc on Friday November 02, 2018 @04:48AM (#18361496)
At an abstract level, "Animal Farm" is not far from such a theme.
Re:Ask HN: What if gmail was compromised? by deanmoriarty on Friday November 02, 2018 @11:56AM (#18363983)
Yeah, I read that book, phenomenal read. Was more thinking of something focused on potential big tech giants' leaks implications.
Re:Ask HN: What if gmail was compromised? by tonteldoos on Sunday November 04, 2018 @07:21PM (#18378862)
The Circle? A heavily underrated book, I think.
Re:Ask HN: What if gmail was compromised? by rorykoehler on Monday November 05, 2018 @07:27AM (#18381756)
If that happened I as an employer would ignore all that stuff unless it was very serious (ie child porn). I would expect the same as an employee. Honestly people should have the freedom to be curious and explore the world as they see fit. It would be a very boring place if we all stayed on the straight and narrow according to some arbitrary norm.
Re:Ask HN: What if gmail was compromised? by gitgud on Friday November 02, 2018 @08:43AM (#18362560)
I thought the ending of %50 of people left was going to be a reference to Avengers: Infinity War...

*snaps fingers

Re:Ask HN: What if gmail was compromised? by gitgud on Friday November 02, 2018 @08:56AM (#18362618)
Well my theory is that if Gmail was "hacked" or exposed, huge parts of the internet would be compromised.

Hundreds of millions of Gmail accounts are the central point of failure in a lot of people's lives. Each account can be used to:

- reset other website accounts

- blackmail

- identity theft

- password discovery

- socially hack connected friends, via phishing

It's a cascading failure that would completely undermine the trust of Google in the public perception.

Although this is possible I'm sure it's highly unlikely...

Re:Ask HN: What if gmail was compromised? by kamikaz1k on Thursday November 01, 2018 @07:51PM (#18359540)
Found the "article" I was talking about:

https://youtu.be/y4GB_NDU43Q

It's a talk by Tom Scott

Re:Ask HN: What if gmail was compromised? by gitgud on Friday November 02, 2018 @08:46AM (#18362576)
Years ago, when I first saw this talk, I wasn't paying attention at the beginning and thought this really happened.

These days it would surprise me if this kind of event happened tomorrow...

Re:Ask HN: What if gmail was compromised? by jamieweb on Thursday November 01, 2018 @03:29PM (#18357546)
Even worse could be an RCE vuln in Chrome at the same time that the google.com search page gets compromised...

Also I think the post you're talking about is this video by Tom Scott: https://youtu.be/y4GB_NDU43Q

Re:Ask HN: What if gmail was compromised? by swedish_mafia on Thursday November 01, 2018 @01:55PM (#18356605)
Even worse, slack.
Re:Ask HN: What if gmail was compromised? by Endy on Thursday November 01, 2018 @01:03PM (#18356060)
Not much would happen. Another minor flutter in the tech world, a bunch of people finally realizing just how much they've given up to one company, and then everything would go back to normal, and everyone would forget that Google rules their existence. Besides, GMail is already compromised - it's a Google product and they can (and do) examine the contents of your mail for potential advertisement and to build their internal profile of you.