The Register® — Biting the hand that feeds IT

Feeds

Google chief 'paranoid' on security after China attack

Schmidt spins Chrome for security line after epic fail

Customer Success Testimonial: Recovery is Everything

Google's chief exec said the search engine giant is paranoid about further security attacks in the wake of a high-profile assault it blames on hackers in China late last year.

Answering questions following an presentation before 400 chief information officers at the Atmosphere 2010 cloud technology conference on Monday, Eric Schmidt said Google took the unusual step of going public about targeted attacks against the firm involving attempts to steal intellectual property as a warning to others.

The attacks, which also targeted the Gmail accounts of Chinese dissidents, relied on exploits against a then unpatched flaw in IE 6 and affected at least 30 other blue-chip firms as well as Google.

"When we were attacked we faced a moral question," Schmidt said according to a Techcrunch report. "Most companies would be embarrassed… we decided we had to tell people as a warning."

The search engine giant tightened up security defences and accelerated plans to move workers over to Chrome OS netbooks in the wake of the attack. Hackers are reckoned to have targeted a Google system involved in processing wiretapping requests from law enforcement. This system relied on Microsoft's antiquated IE 6 browser, leaving Google open to attack.

Schmidt said the attack relied on breaking into a single system based on an outdated browser. This compromised system was used as a stepping stone to penetrate other systems and create further disruption.

Google was now "paranoid" about security in the wake of the incident, Schmidt told conference delegates, Cnet reports.

Schmidt advised delegates to run only the latest version of web browsers and operating system software, before going on to claim that its web services and platform technology will be more secure than alternatives. "We ultimately believe the web platforms we’re building over the last year will be inherently more secure (Chrome, Chrome OS)," Schmidt said.

Techcrunch has a transcript of Schmidt's Q&A session at Atmosphere 2010 in a story here. ®

Ensure Ease of Recovery with Asigra’s Agentless Software

Latest Comments

Government

I have to interface to US government and Massachusetts State government web sites all of the time, and it amazes me that they still all require/request that you use IE, usually IE6. It just highlights the fact that there is a whole subindustry of 2nd rate software companies that sell only to Government. They could not make it in the commercial sector.

0
0

What's paranoia got to do with it (got to do with it)?

Pre-assault = Labile and Dangerously Naive.

Post-assault = Resistant and Post-Traumatically Distressed.

Caveat: Post-traumatic dissociative symptoms may mimic those of degenerative schizophrenia, which is a different condition entirely. Accurate differential diagnosis is essential to the successful outcome.

0
0

Google?

Using IE6? Why not chrome?

0
0

More from The Register

 breaking news
NSA PRISM-gate: Relax, GCHQ spooks 'keep us safe', says Cameron
Whatever they are up to, it's all above board, we're told
PRISM snitch claims NSA hacked Chinese targets since 2009
Snowden suddenly looks safer in Hong Kong after revelations
 breaking news
US chief spook: Look, we only want to spy on 6.66 BEELLLION of you
Americans assured they are not in the NSA's sights
Speech-to-text drives motorists to distraction
Will talking to you mean I crash into that car up ahead, Siri?
DHS warns of vulns in hospital medical equipment
Has your doctor's anasthesia machine been hacked?
 breaking news
Yes, maybe we should keep hackers in the clink for YEARS, mulls EU
Watch out black hats, they just might throw away the key
Microsoft borks botnet takedown in Citadel snafu
Stupid Redmond kicked over our honeypots, wail white hats
Critical Java SE update due Tuesday fixes 40 flaws
And yes, most are remotely exploitable
NSA accused of new crimes ... against slideware
They may take our information but they cannot take our REFINED AESTHETICS