Google’s eponymous social network, Google+,may be shut down due to a vulnerability that may allow malicious developers to collect data from hundreds of millions of Google users. Google said in a blog post that the company discovered the vulnerability in March 2018 as part of Project Strobe. Project Strobe is comprised of 100 people and is responsible for a comprehensive review of third-party development tools that allow access to Google accounts and Android device data. Google claims that the Google+ People API allows users to access personal data and friends data, which inadvertently allows third-party applications to remove personal data that is not marked as public, including name, email address, occupation, and gender. Google said that up to 500,000 Google+ accounts were affected, and as many as 438 apps might use that API. Ben Smith, vice president of engineering at Google, said in a statement that the company discovered the vulnerability in a wide-ranging privacy an...
评论
发表评论