Dark Reading is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

Risk

3/19/2009
01:42 PM
50%
50%

Feds To Shut Down Google Apps?

FTC is weighing request from privacy group that claims data stored in the cloud isn't secure.

The Federal Trade Commission is looking into the risks of cloud computing.

The FTC held a two-day meeting this week to discuss data security in the global economy. Regulators are trying to determine whether they should intervene with cloud computing to address security and privacy (PDF) concerns.

Critics, including the Electronic Privacy Information Center, argue that consumers are at greater risk of privacy breaches with cloud computing because data management practices are inconsistent.

EPIC asked the FTC for a legal injunction to stop cloud computing until the government approves it. In the unlikely event that the request is fulfilled, millions of individual and business users could be prevented from accessing data stored in the cloud.

EPIC made the request after a Google Docs breach that exposed some word processing documents. The letter specifically targets Google and urges the FTC to look into whether the company is using unfair and deceptive practices by providing products and services that aren't safe. EPIC's request applies to Google Apps, Google Calendar, Google Docs, and Gmail.

"Cloud Computing Services are rapidly becoming an integral part of the United States economy, with implications for business development, security, and privacy," EPIC explained in the letter (PDF).

It cited a September report from ComScore Media Metrix, which estimated that 26 million consumers used Google's Gmail Cloud Computing Services. The group also cited a March IDC study that predicts corporate IT spending on cloud services will reach $42 billion by 2012.

Proponents of cloud computing -- including Google -- argue that cloud computing is at least as secure as traditional computing because providers can often better protect data than their customers can.


InformationWeek Analytics has published an independent analysis of the challenges around setting business priorities for next-gen Web applications. Download the report here (registration required).

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Aviation Faces Increasing Cybersecurity Scrutiny
Kelly Jackson Higgins, Executive Editor at Dark Reading,  8/22/2019
Microsoft Tops Phishers' Favorite Brands as Facebook Spikes
Kelly Sheridan, Staff Editor, Dark Reading,  8/22/2019
Capital One Breach: What Security Teams Can Do Now
Dr. Richard Gold, Head of Security Engineering at Digital Shadows,  8/23/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon
Current Issue
7 Threats & Disruptive Forces Changing the Face of Cybersecurity
This Dark Reading Tech Digest gives an in-depth look at the biggest emerging threats and disruptive forces that are changing the face of cybersecurity today.
Flash Poll
The State of IT Operations and Cybersecurity Operations
The State of IT Operations and Cybersecurity Operations
Your enterprise's cyber risk may depend upon the relationship between the IT team and the security team. Heres some insight on what's working and what isn't in the data center.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-15540
PUBLISHED: 2019-08-25
filters/filter-cso/filter-stream.c in the CSO filter in libMirage 3.2.2 in CDemu does not validate the part size, triggering a heap-based buffer overflow that can lead to root access by a local Linux user.
CVE-2019-15538
PUBLISHED: 2019-08-25
An issue was discovered in xfs_setattr_nonsize in fs/xfs/xfs_iops.c in the Linux kernel through 5.2.9. XFS partially wedges when a chgrp fails on account of being out of disk quota. xfs_setattr_nonsize is failing to unlock the ILOCK after the xfs_qm_vop_chown_reserve call fails. This is primarily a ...
CVE-2016-6154
PUBLISHED: 2019-08-23
The authentication applet in Watchguard Fireware 11.11 Operating System has reflected XSS (this can also cause an open redirect).
CVE-2019-5594
PUBLISHED: 2019-08-23
An Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") in Fortinet FortiNAC 8.3.0 to 8.3.6 and 8.5.0 admin webUI may allow an unauthenticated attacker to perform a reflected XSS attack via the search field in the webUI.
CVE-2019-6695
PUBLISHED: 2019-08-23
Lack of root file system integrity checking in Fortinet FortiManager VM application images of all versions below 6.2.1 may allow an attacker to implant third-party programs by recreating the image through specific methods.