Comments on: Google fixes Web site security bug

Vulnerability could have exposed some users to account hijacks, phishing scams and other attacks, security firm says.

[Roman12]

Just a bit concerned.

As a user of Gmail, and Google Adwords I am very concerned, and at the same time relieved that its been fixed. Such flaws can lead to disappointment.
__________________________________
R.K.
http://www.Remove-All-Spyware.com/

Why isn't this marked as a High Impact issue!

Come on News.com this is a super high impact! If it was Microsoft you would have been sure to make it so.

[Woodmon]

Why hi-impact now?

As anpother reader commented, yesterdays news.

Now if Google had not reponded to the issue and then Finjan had to go public, it would be a high impact issue.

The fact is there are many outstanding security issues lurking out there in various software products and online websites (and this will always be the case).

Many of these issues will not be reported publicly (until solved) but that does not mean they are not being worked on.

Publicly reporting the issues before the developer/service provider has had ample opportunity to repair is irresponsible.

Conversely it is irresponsible for security experts and the media not to report if there indeed has been ample time to repair.

The balancing act (the topping point) in reporting involves deciding on how much time is enough, and more importanly, how large the security issue is and if any workarounds are available.

This is up to intelligent minds to decide, at both software development companies, so-called security expert/consulting companies, the media and the public at-large.

Woody

[M C]

This is last month's news...literally.

What's next, a report on the worm that infested computers in 1998?

[Woodmon]

I thought Google was not talking to cnet? What changed?

Google confirmed that it was alerted "a little while ago" and fixed the flaw. "No user data was compromised, and we applaud Finjan for following industry best practices for vulnerability disclosure," a Google representative said in an e-mailed statement.

-

[n3td3v]

I kind of bet you guys to it

See: http://www.google.com/search?hl=en&lr=&q=%22script+injection+in+google+groups+beta%22&btnG=Search

Thanks, n3td3v ;-)