YaKaLeDo Posted May 6, 2005 Share Posted May 6, 2005 It seems that Google is expecting that every web page that asks for a login and password to be SSL secure. Which just makes sense. I understand that most forum software don't use SSL.. I don't know how feasible is that, but maybe they should. Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585880797 Share on other sites More sharing options...
NinjaGinger Posted May 6, 2005 Share Posted May 6, 2005 I tried this software, read about the issues, removed it, switched on this morning and all my cookies seem to have gone. Im now having to enter username and passwords on all my sites, including this 1. :blink: Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585880801 Share on other sites More sharing options...
+chorpeac MVC Posted May 6, 2005 MVC Share Posted May 6, 2005 Nope don't use this. Sometimes stupid things happen. Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585880875 Share on other sites More sharing options...
JMann Veteran Posted May 6, 2005 Veteran Share Posted May 6, 2005 I saw the new tool yesterday, and thought wow, looks good. Read up about it and found about the bug. Closed the Google Toolbar webpage. Damn, thats quite a problem. :/ Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585880964 Share on other sites More sharing options...
BoundToEarth Posted May 6, 2005 Share Posted May 6, 2005 I'm glad I didn't use it :D Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585880976 Share on other sites More sharing options...
psychoticDEMENTO Posted May 6, 2005 Share Posted May 6, 2005 My cookies are being stoeled?! OH TEH NOES! Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585880995 Share on other sites More sharing options...
Guolung Posted May 6, 2005 Share Posted May 6, 2005 The Inquirer has a piece about this, including a link on how to block it. check: http://www.theinquirer.net/?article=23051 Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585881018 Share on other sites More sharing options...
Code.Red Posted May 6, 2005 Share Posted May 6, 2005 Does Google know? Has anyone talked to them, have they responded? Thats a pretty big flaw, especially a big gaping one for google. Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585881094 Share on other sites More sharing options...
_fOoL_ Posted May 6, 2005 Share Posted May 6, 2005 webaccelerator.google.com/GoogleWebAcceleratorSetup.msi h4(|< Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585881104 Share on other sites More sharing options...
Code.Red Posted May 6, 2005 Share Posted May 6, 2005 _fOoL_ said: webaccelerator.google.com/GoogleWebAcceleratorSetup.msih4(|< 585881104[/snapback] ? Also, If you put neowin in the excluded sites, and havent visited neowin when it wasnt excluded, I'm assuming that it won't share my cookies? Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585881111 Share on other sites More sharing options...
RootWind Posted May 6, 2005 Share Posted May 6, 2005 Jugalator said: Wow, now that's a beta issue if I've ever heard of one! :blink:Well, this is definitely a slip in their QA procedures. Their programmers are generally good though. Look at google.com, Gmail, Google Maps, and so on. :) I'm not sure of what "conspiracy" you're talking about, when it has to do with users logging into forums with another guy's account? 585880380[/snapback] Well, they have been hiring a boat-load of people in recent months. Might be beginning to fall under the "current structure doesn't fit that many workers" category. Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585881128 Share on other sites More sharing options...
NienorGT Posted May 6, 2005 Share Posted May 6, 2005 "Google Installer" said: Google receives and temporarily caches cookie data that your computer sends with webpage requests in order to improve performance. Ya Ya Ya...Hope this will be removed... Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585881132 Share on other sites More sharing options...
EddieZ Posted May 6, 2005 Share Posted May 6, 2005 WARNING! Do NOT use any online/electronic/internet banking or credit card purchases with this 'web accellerator'. All the information that is needed tot deduce algorithms and the cardnumbers (including the security numbers) are present in the stored cache. Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585881200 Share on other sites More sharing options...
Tim Dorr Veteran Posted May 6, 2005 Veteran Share Posted May 6, 2005 EddieZ said: WARNING! Do NOT use any online/electronic/internet banking or credit card purchases with this 'web accellerator'. All the information that is needed tot deduce algorithms and the cardnumbers (including the security numbers) are present in the stored cache. 585881200[/snapback] If it's done on an HTTPS site, then it's not cached at all. Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585881227 Share on other sites More sharing options...
NienorGT Posted May 6, 2005 Share Posted May 6, 2005 EddieZ said: WARNING! Do NOT use any online/electronic/internet banking or credit card purchases with this 'web accellerator'. All the information that is needed tot deduce algorithms and the cardnumbers (including the security numbers) are present in the stored cache. 585881200[/snapback] WHAT??? Hopefully I don't use that junk... But i'm sure that Google will be sued for this... I hope so... Man... even if it's a stupid Beta... It violate all privacy / security laws... Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585881241 Share on other sites More sharing options...
kombolcha Posted May 6, 2005 Share Posted May 6, 2005 runs ccleaner* uninstalls gwa* Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585881281 Share on other sites More sharing options...
sn00pie Posted May 6, 2005 Share Posted May 6, 2005 I installed it yesterday, but then I couldn't access the internet because the Web Accelerators proxy was having some problems, so I un-installed it right away. That's a phreak thing coming from Google. :wacko: Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585881299 Share on other sites More sharing options...
oddcrap Posted May 6, 2005 Share Posted May 6, 2005 Doesn't surprise me, as with any new software they're going to be problems. Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585881938 Share on other sites More sharing options...
XPGoD Posted May 6, 2005 Share Posted May 6, 2005 timdorr said: If it's done on an HTTPS site, then it's not cached at all. 585881227[/snapback] But some sites... are retarded. UMB Bank has a way you can log in to your account minus all the HTTPS until your staring at your bank info...odd yet true. Hackers usually don't go after the "pot" of info without first getting slivers. Enough slivers presents a whole piece. Most people for some reason become moronic when creating passwords to things later used for secure purposes/personal use. The odds of getting a forum password, versus that a bank.... As you know, the ideas are endless. Beings that each time I post, no one posts after, yet reads.... oh well eh? Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585882008 Share on other sites More sharing options...
sdb815 Posted May 6, 2005 Share Posted May 6, 2005 Why are people installing this anyway? Do people on broadband really need more speed? I agree that this is a HUGE bug, but come on, these web accelerators never do what they claim. Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585882031 Share on other sites More sharing options...
John Veteran Posted May 6, 2005 Veteran Share Posted May 6, 2005 oddcrap said: Doesn't surprise me, as with any new software they're going to be problems. 585881938[/snapback] This is far more serious than some sort of "bug" that one would expect in pre-release (beta) software. Google decided to have the tool cache cookies. WHY? "For performance reasons". Bull****. There's no reason whatsoever to cache cookies from one machine and spread them to thousands of other machines. The whole concept of a cookie is to store unique information about a user or machine. Google has just made cookies a massive, worldwide security issue with this decision to "cache" (read: share) cookies. Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585882175 Share on other sites More sharing options...
nickg78 Posted May 6, 2005 Share Posted May 6, 2005 (edited) Being a beta version isn't an excuse for such problems. Performance reasons isn't an excuse either. I believe they should remove this software from their page, untill they fix it and they remove the cookies remote caching "feature". Edited May 6, 2005 by nickg78 Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585882185 Share on other sites More sharing options...
Bhav Posted May 6, 2005 Share Posted May 6, 2005 nickg78 said: Being a beta version isn't an excuse for such problems. Performance reasons isn't an excuse either. I believe they should remove this software from their page, untill they fix it and they remove the cookies remote caching "feature". 585882185[/snapback] :yes: agree completely. Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585882493 Share on other sites More sharing options...
ember Posted May 7, 2005 Share Posted May 7, 2005 damn, thank god ive uninstalled it :ninja: this is pretty serious if you ask me, someone being able to login with your account and all.. :unsure: Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585884369 Share on other sites More sharing options...
Doli Posted May 7, 2005 Share Posted May 7, 2005 Where are the "ill follow Google into hell" fans now? i dont really buy this researchware stuff, spyware with a friendly name. well Google made a bad bobo, they will fix it but broadband should be fast enough without it, do you really need it? you were fine before it Link to comment https://www.neowin.net/forum/topic/317125-major-google-web-accelerator-security-issue/page/3/#findComment-585884442 Share on other sites More sharing options...
Recommended Posts