Archive for the ‘Cyber Law’ Category
Hackers hit google Inc where it hurts secret password system
Ever since Google disclosed in January 2010 that internet traders had stolen information from its computers the exact nature and extent of the theft has been a closely guarded company secret. But a person with direct knowledge of the investigation now says that the losses included one of Googles crown jewels, a password system that controls access by million of users worldwide to almost all of the companies web services, including email and business applications.
The program, code named Gaia, was attacked in a lightning raid taking less than two days last December, the person said. Described publicly only once at a conference four years at, the software is intended to enable users and employees to sign in with their password just once to operate a range of services.
The intruders do not appear to have stolen passwords of Gmail users, and the firm quickly started making significant changes to the security of its networks. But the theft leaves open the possibility, however faint, that the intruders may find weaknesses that Google might not even be aware of, independent computer experts said. The new details seem likely to increase debate about security and privacy of cast computing systems like Google’s that now centralize the personal information of millions of individuals and business. As vast amounts of digital information are stored in a cluster of computers, referred to as “cloud” computing a single breach can lead to disastrous losses.
The attacks have been traced to computers at two campuses in China, but investigators acknowledge that the true origin may have been concealed, a quintessential problem of cyber attacks.