Re:Docker Hub Hacked – 190k accounts, GitHub tokens revoked,...
by Scoundreller on Saturday April 27, 2019 @12:37AM
(#19763799)
Which vulnerability was this?
Re:Docker Hub Hacked – 190k accounts, GitHub tokens revoked,...
by wahern on Saturday April 27, 2019 @12:42AM
(#19763823)
Presumably the Google+ exfiltration issue.
> The bigger problem for Google isn’t the crime, but the cover-up. The vulnerability was fixed in March, but Google didn’t come clean until seven months later when The Wall Street Journal got hold of some of the memos discussing the bug. The company seems to know it messed up — why else nuke an entire social network off the map? — but there’s real confusion about exactly what went wrong and when, a confusion that plays into deeper issues in how tech deals with this kind of privacy slip.
(https://www.theverge.com/2018/10/9/17957312/google-plus-vuln...)
It wasn't authentication credentials, but still.