News for hackers. Stuff that matters.
Re:I have gained admin access to numerous GCloud Organizatio... by we_never_see_it on Tuesday May 30, 2023 @11:20AM (#36125911)
I have hard times feeling any sympathy for these companies. When you trust an ad company like Google what did you expect? Maybe Google will shutdown this product and fix the secuity hole in the process.
Re:I have gained admin access to numerous GCloud Organizatio... by elzbardico on Tuesday May 30, 2023 @11:26AM (#36125982)
Knowing the byzantine ways of Google support, I wouldn't be surprised if Google's reaction to this would be to ban the account of everyone involved in this episode.
Re:I have gained admin access to numerous GCloud Organizatio... by peddling-brink on Tuesday May 30, 2023 @11:30AM (#36126033)
Google should shut down Cloud because they allow groups to be added to IAM?

That’s an interesting take.

Re:I have gained admin access to numerous GCloud Organizatio... by ghusto on Tuesday May 30, 2023 @11:37AM (#36126108)
Fair enough, but it's also worth noting that this mistake is difficult to make in AWS. You can do it, but you have to be so explicit about what you're doing that I can't imagine anyone managing it accidentally.

The system is broken if this has happened _multiple_ times to this guy.

Re:I have gained admin access to numerous GCloud Organizatio... by elzbardico on Tuesday May 30, 2023 @11:35AM (#36126086)
I think you misinterpreted OP. He is making a pun with the widespread beliefs that

a) Google doesn't care about giving user support for their products even if you pay

b) Over a not-so-long time the survival rate of every Google product seems to drop to zero unless it is related to search and ads.

So, the joke is that the problem would solve itself when google predictably kills this product.

Re:I have gained admin access to numerous GCloud Organizatio... by peddling-brink on Thursday June 01, 2023 @11:14AM (#36152280)
I’m not sure that’s a pun. But on re-read I am seeing the humor. On my first read I just saw the tired vitriol, “google == bad”.
Re:I have gained admin access to numerous GCloud Organizatio... by anon223345 on Tuesday May 30, 2023 @12:41PM (#36127040)
What it’s doing is actually useful, using a group to easily add people to roles is great

Not making the group do confirmation, or even acknowledging the addition is super stupid