ment 5/23 '19 posted
0
Google은 14 년간 G Suite 암호를 완벽하게 보호하는 데 실패

• 회사는 G Suite 관리자에게 영향을받은 암호 변경을 요청하고 아직 완료하지 않은 사용자 암호를 재설정했다고 말했습니다.
• "이 암호는 암호화된 안전한 인프라에 남아있었습니다.
• 이 문제는 수정되어 영향을 받은 암호에 대한 부적절한 액세스 또는 오용의 증거가 없습니다. "
• Google은 버그로 인해 얼마나 많은 사용자가 영향을 받았는지 밝히지 않았지만 문제는 G Suite의 사용자에게만 영향을 주며 Google의 무료 소비자 계정을 사용하는 사람들에게 영향을 주지 않습니다.
• 오늘 블로그 포스트에서 구글은 G 스위트 사용자 중 일부가 패스워드를 일반 텍스트로 저장하도록 한 버그를 발견했다고 밝혔습니다.
• 여기서 우리는 우리 자신의 표준이나 고객의 표준에 부합하지 못했습니다.
• Google의 정책은 보안을 위해 비밀번호를 숨기는 암호화 해시로 비밀번호를 저장하는 것입니다.
• 그러나 우리는 최근 엔터프라이즈 G Suite 고객 중 일부에게 암호화된 내부 시스템에 일부 비밀번호가 저장되어 있음을 알렸습니다.
• 대답은 약간의 암호화에 있습니다. 암호를 설정할 때 암호의 정확한 문자를 기억하는 대신 "해시 함수"로 암호화하여 "72i32hedgqw23328"과 같이 저장합니다. 
• 관리 콘솔에있는 도구를 사용하여 관리자는 회사 사용자의 사용자 비밀번호를 업로드하거나 수동으로 설정할 수 있었습니다.
• 2005 년에이 기능을 구현할 때 오류가 발생했습니다. 관리 콘솔에 손상되지 않은 비밀번호의 복사본이 저장되었습니다.
• 또한 새로운 G Suite 고객 가입 절차의 문제를 해결할 때 2019 년 1 월부터 보안 암호화된 인프라에 실수로 암호화되지 않은 비밀번호의 하위 집합을 저장했음을 알게 되었습니다.


Google stored some users' passwords in plain text for years Google inadvertently stored…
Google stored some users' passwords in plain text for years [mashable.com]
The company isn't taking any chances despite the lack of…
Google stored some business passwords as plain text [www.engadget.com]
Google has begun forcing “a subset of our enterprise G Suite customers” to change their…
Google exposes G Suite issue that stored plain-text passwords on its servers for 14 years [www.pcworld.com]
In a blog post today, Google disclosed that it recently discovered a bug that caused some…
Google stored some passwords in plain text for fourteen years [www.theverge.com]
Photo: Justin Sullivan (Google)Google revealed a bug on Tuesday that left enterprise G Suite…
Google Failed to Fully Secure G Suite Passwords For 14 Years [gizmodo.com]
Google revealed that an unspecified number of passwords of G Suite users were stored in…
Google Admits It Stored "Some" Passwords in Plain Text Since 2005 [news.softpedia.com]
Google’s policy is to store your passwords with cryptographic hashes that mask those passwords to…
Notifying Administrators About Unhashed Password Storage [cloud.google.com]
In brief: After Facebook and Twitter admitted to the same thing, Google…
Google says it stored some G Suite passwords in plain text since 2005 [www.techspot.com]
Google has revealed that some G Suite passwords have been stored in plaintext, meaning without…
G Suite passwords stored in plain text for 14 years [www.cloudpro.co.uk]
Google has admitted that some of its business customers of G Suite (formerly known as Google Apps)…
Security Boulevard [securityboulevard.com]
After Facebook and Twitter, Google becomes the latest technology giant to have accidentally…
Google Stored G Suite Users' Passwords in Plain-Text for 14 Years [thehackernews.com]
It happened again: Google announced today that it's the latest tech giant to have accidentally…
Google Has Stored Some Passwords in Plaintext Since 2005 [www.wired.com]
Google revealed Wednesday that had stored passwords to G Suite enterprise accounts in plaintext.…
G Suite Passwords Stored in Plaintext Since 2005 [www.macobserver.com]
Google says some G Suite user passwords were stored in plaintext since…
Google says some G Suite user passwords were stored in plaintext since 2005 [techcrunch.com]


newest repliespopular replies
Open Wiki - Feel free to edit it. -
5/23 '19 answered
0



permanent link
Open Wiki - Feel free to edit it. -
5/23 '19 answered
0



permanent link

Related

Featured

Important Notice: Discontinuation of Our Wiki Service

Dear Valued Users,

We hope this message finds you well. We are writing to inform you of an important upcoming change to our services. After careful consideration and analysis, we have made the difficult decision to discontinue our wiki site, effective one month from 2024/04/30.

This was not an easy decision to make, as we understand the importance of the resources and community that have been built around our wiki. However, due to evolving market conditions and strategic realignments, we must redirect our resources and efforts towards other ventures that will allow us to serve you better in the future.

What This Means for You:

  • Access to Content: You will continue to have full access to all content on the wiki until the discontinuation date. We encourage you to save or migrate any content you wish to retain.
  • Final Date of Service: The wiki will become inaccessible starting 1st June 2024, after which all content will be permanently removed.

We are immensely grateful for the support and contributions of our user community throughout the years. The wiki is being retired, but our team will be back soon with new services and apps.

Thank you for being a part of our journey.

Warm regards,

editoy Inc.