Comment Why are the security experts the bad guys? (Score 2) 17
If you have to feed the sock puppets, do you have to propagate the vacuous Subject? What was your main point again?
I want my main point to focus on a little anecdote about breaking google security using the WiFi linkage. I sure hope I'm not publicizing a little known attack vector, but...
My phone has metered 5G data so I use a lot of public Wi-Fi when I'm traveling. Separate problem that a large fraction of that data is for ads that I never wanted and merely ignore. I basically regard public Wi-Fi as untrustworthy no matter what it says about the connection status, but that's a no-brainer that comes free with all the disclaimers when you connect. However I tend to trust municipal Wi-Fi networks more since they are supposed to be into public service.
So a couple of months ago I was in a different area and decided to connect to a municipal Wi-Fi network. Wide variation in the login procedures is also a problem, but this particular network seemed to offer Google account linkage as an easy alternative and I was in a bit of a hurry, so I tried that option.
Still not sure how it was done, but it wound up resetting my Google Account in the process. I sure hope it was just incompetence in a subcontractor because that's just par for most government courses these years. Several days of struggle to get the account back to normal--except for one Chromebook that is still in some kind of abnormal state. Probably yet another gaping security hole here, but the only advice I can get from the google is to give it a factory reset. With regards to the story, access to my phone number was a key in the reconstruction process, but still isn't helping with the sick Chromebook.
Per force I've spent a lot of time trying to understand what the google thinks security is about. Wasted time. I have no idea. However the dark hackers are strongly motivated to study this stuff in great detail, and they are masters of finding the weak links in various chains of security. Microsoft set yet another record for patches this month. And I'm sure it's purely coincidental, but local TV has been going down lists of all the major corporations that have announced breaches and exfiltration of piles of personal data.
Have a nice day? Only if you're a bad guy, it appears. And a lot of the blame should go to the google. No evil? In a flying pig's...