Google+ Will Shut Down in 2019 After Exposing User Data

Google has been trying to gain a foothold in social networking for years, going all the way back to the tragically flawed Google Buzz in 2010. A year later, it launched Google+ with the aim of taking on Facebook. Now, the dream is over. Following a security audit and reassessment of the social network’s performance, Google has opted to shut down Google+ in 2019.

According to Google’s VP of engineering Ben Smith, the company undertook a security and privacy audit earlier this year called Project Strobe. Specifically, Google started looking at its API endpoints over concern developers could abuse them. Facebook’s recent difficulties highlighted that possibility, of course. While Facebook was able to power through its security crisis because it’s so huge, Google+ was barely hanging on before Google began its investigation.

Google discovered a problem with the Google+ People API that could allow third-party developers to scrape optional profile information made available to your friends like name, email, occupation, and gender. Google says it does not see evidence that developers made use of the bug before it was patched back in March, but it can’t be 100 percent certain.

Because Google doesn’t keep API log data on G+, it can’t confirm how many users were vulnerable, but it thinks the number is north of 500,000. It’s possible you have a Google+ page with personal data on it and simply forgot about it. Google pushed its social platform very hard for several years, going so far as to integrate its comments with YouTube and make web logins part of G+. And for what? Google’s examination of G+ in the wake of the security mess forced it to confront some hard truths. For example, 90 percent of G+ sessions latest less than five seconds.

Google+ usage among consumers is so abysmal that it’s not worth the headache of revamping its security model. So, Google is shutting it down consumer access to G+. The service will wind down slowly over the next 10 months, but it plans to reformulate G+ as a business tool of some sort. The security flaw feels more like an excuse to kill a product that has underperformed for years.

While the Google+ API was the biggest concern, Google says it is also making changes to several other products. Google account permissions will have more granular controls for each permission an app requests (see above). Developers will also have more limited access to Gmail data going forward. On Android, the contacts API will no longer include access to call log and SMS data unless you set the requesting app as your default.

Continue reading

The PlayStation 5 Will Only Be Available Online for Launch Day

The PlayStation 5 isn't going to be available in stores on launch day, and if you want to pick up an M.2 SSD to expand its storage, you'll have some time to figure out that purchase.

Jupiter’s Moon Europa Might Glow in the Dark

The intense radiation bombarding Europa might make it glow in the dark, and that could help scientists learn more about the moon's ice sheets and the ocean below.

Which Is Faster, the Xbox Series X or PlayStation 5? Early Data Says It’s Complicated

Competitive head-to-head data on the Xbox Series X versus the PlayStation 5 is beginning to trickle out.

Time to Update: Google Patches 2 Severe Zero-Day Chrome Vulnerabilities

Unlike the last few zero-days, Google didn't find these security holes itself. Instead, it was tipped by anonymous third-parties, and the problems are severe enough that it hasn't released full details. Suffice it to say, you should stop putting off that update.