Sputnik discussed this with Gary S. Miliefsky, a globally recognized cybersecurity expert, inventor, and founder of numerous cybersecurity companies.
Sputnik: What surprises you most in this latest Google scandal? Is it the fact of what happened, or is it the cover-up?
Gary S. Miliefsky: Neither surprises me; Google used to have a slogan "Don't be evil" and they changed that slogan in 2018 after restructuring and it just doesn't surprise me — there really is bad behavior.
Sputnik: Are they hiding other things?
In this case with the 500,000 records from the Google Plus accounts, Google stated that it didn't violate any federal law, each state has a different law and each state require disclosure of a breach with more information. I expect attorney-generals to circle the wagons and start a lawsuit against Google for this very soon.
Sputnik: How often do breaches like this get reported?
Gary S. Miliefsky: When there is a breach, you're supposed to disclose it, at least, at a state level; for example, in California, within 30 days of a breach you have to disclose it.
Now we can't blame just Google, look at the Yahoo breach, it took them years to disclose one of the largest breaches in history, so you're supposed to disclose within 30 days, but sometimes they have excuses — maybe they are under lockdown, maybe the FBI is involved, maybe they're still collecting data, but the best practice is, to be honest, open and transparent as quickly as possible.
READ MORE: Russia Blames Google of Meddling in Russian Elections, IT Giant Not Responding
Sputnik: How much damage can you do in 30 days; why is it such a long period of time? I believe that the new European regulations say 72 hours?
Gary S. Miliefsky: Yeah, and the GDPR (General Data Protection Regulation) will probably be all over on them on this. You remember recently, Facebook had a similar problem with a different bug, but it's a vulnerability that allowed exploitation of at least 50 million Facebook accounts, I think, accounts just a month or two ago and as a result, they're going to be fined $1.2 — 1.3 billion by the EU.
Sputnik: I'm also wondering, if I were evil and I were Google, I'd probably want to do everything I could to make sure that this information would not come out. Why ruin your reputation? Do you think that they actually stifle or suppress news about these kinds of things by manipulating search results or doing other covert things?
READ MORE: Google Is Walking on the Razor's Edge — Cyber Security Expert
Sputnik: According to the law, 30 days in the US, the new European regulations say 72 hours; how soon do you have to not just disclose publicly, but do you actually have to contact the people who are affected? Because in this case, they're saying half a million users were perhaps affected. Are you supposed to reach out to those specific users to tell them that there's a possibility that their data was leaked?
Gary S. Miliefsky: Yes, absolutely — in fact, every person. I think personal sovereignty is such an important thing, […] they'll tell you it's just for marketing, "we're just doing consumer demographics, that's why we turn on your microphone, that's why we geo-locate you so many times that the batteries die on your devices, it's just to help us do things better" […] they're making a lot of money off of us becoming the product, and as a result they don't want to disclose as fast as possible, they don't want to tell everyone that you've become a product and your data is linked somewhere, and by the way, "we've done eavesdropping on you so the amount of data we have on you is a lot more than you thought."
READ MORE: Google, Facebook, and the Manipulation of Society
Sputnik: Tell me about the eavesdropping, you're getting me very worried actually. What are they actually listening to?
Sputnik: You always hear these stories, even experiments, where people don't have a cat saying: "I think we should get some food for the cat" and then they get an ad for cat food — is it really that bad?
Gary S. Miliefsky: How many Android phones are in the world and how many Google apps are on the Apple iPhone? So I believe there're over a billion Androids and Google owns on the Android; the function calls to a microphone, keyboard, Wi-Fi, Bluetooth and webcam, GPS; they own it all, they own your data. We have to accept that we've given up our privacy for convenience and these companies really don't care about us.
Views and opinions expressed in the article are those of Gary S. Miliefsky and do not necessarily reflect those of Sputnik