Posts

Showing posts with the label user data expose

Tumblr’s ‘recommended blogs’ feature exposed user data

A security bug that hit Tumblr’s recommended blogs module may have exposed users’ private information, according to  an open letter . Information like email addresses, passwords, IP addresses, and self-reported locations may have become exposed due to the bug if individual accounts were hit. It’s unclear if the bug affected individual accounts, according to the open letter, but an investigation concluded that the bug “was rarely present.” Related:  YouTube was down but now it’s back “We’ve also thoroughly investigated any way in which our community could have been affected,” the letter reads. “We found no evidence that this bug was abused, and there is nothing to suggest that unprotected account information was accessed.” The bug was brought to Tumblr’s attention through a bug bounty program run by Oath, Tumblr’s parent company. A security researcher discovered that if a blog appeared in the recommended section of a user’s dashboard, “it was possible, using debug...

Google+ will be shut down in next 10 months for consumers following security lapse - Another data breach

Google is going to shut down the consumer version of Google+ over the next 10 months, the company writes in a blog post today. The decision follows the revelation of a previously undisclosed security flaw that exposed users’ profile data that was remedied in March 2018. Google says Google+ currently has “low usage and engagement” and that 90 percent of Google+ user sessions last less than five seconds. Still, the company plans to keep the service alive for enterprise customers who use it to facilitate conversation among co-workers. New features will be rolled out for that use case, the company says. Google is focusing on a “secure corporate social network,” which is odd considering this announcement comes alongside news that the company left profile details unprotected. Related:  Facebook's Breach will be Forgotten? DATA is Misused. IT’LL TAKE 10 MONTHS TO FULLY SHUT DOWN THE SERVICE In addition to sunsetting Google+, the company announced new privacy adjustments...