Skip to main content

China Cyberattack Targeted Google Password System

Image used with permission by copyright holder

In early 2009, Google announced it had been subjected to a “highly sophisticated and targeted attack” on its operations in China, with part of the attack targeting email accounts used by Chinese human rights activists. The incident has sparked an international policy dispute between China and the United States, and has seen Google shut down portions of its China operations and move its Google.cn search service to Hong Kong where it can operate outside the Chinese government’s censorship regime. Now the New York Times, citing an unnamed source with “direct knowledge” of the investigation, says the attack was after more than some Gmail accounts: it targeted Google’s single sign-in password system, widely regarded as on of the company’s most crucial technologies.

Recommended Videos

Google one-password technology, known in-house as “Gaia,” enables users to use a plethora of Google services—from Gmail to calendars to Google Apps to Picassa photo sharing to blogs to Google Wave and much more—without having to sign into each Google service separately.

According to the story, the attackers do not appear to have been able to access passwords of Gmail users, and Google quickly responded to the attack by making “significant” changes to its security and network profile after the attack. However, the story raises the possibility that Google’s single sign-on system may have been compromised. Attackers specifically targeted Google developers working on Gaia, and were able to access a group of computers at Google’s Mountain View headquarters, including a software repository.

As Google’s emphasis increasingly shifts to mobile and cloud-based services, security flaws with a single sign-in system could potentially put a great deal of business and personal data at risk.

Geoff Duncan
Former Contributor
Geoff Duncan writes, programs, edits, plays music, and delights in making software misbehave. He's probably the only member…
Google coming for Duolingo as it launches language learning feature
Google's Little Language Lessons

Learning a new language is one of those goals that many people share, but is hard to achieve in practice. Tools like Duolingo have gained popularity by gamifing the language learning experience, but now Google has taken its own approach, rolling out an experimental set of playful language learning tools powered by its Gemini AI.

Google describes the new feature, called Little Language Lessons, as "a collection of three bite-sized learning experiments, all powered by Google’s Gemini models." The idea is to tweak language tips to the particular context you're currently in -- such as visiting a restaurant, taking a flight, or dealing with a travel problem like a lost passport.

Read more
Google adds Spanish and French to NotebookLM in huge language update
Google video explaining Audio Overview languages.

NotebookLM is one of Google's lesser-used AI products but it introduced a feature that's becoming increasingly popular -- Audio Overviews. The company already brought it over to Gemini and plans to add the feature to Google Docs in the next few months too. Until now, Audio Overviews has been an English-only tool but as of this week, it's available in over 50 languages.

The NotebookLM platform is all about putting together notebooks of information and different sources and using LLMs to interact with them. Audio Overviews is basically a fancy summary tool -- it lets you generate audio summaries of your selected sources that are presented in the style of a podcast with two AI hosts.

Read more
‘You can’t lick a badger twice’: How Google’s AI Overview hallucinates idioms
Samples of Google AI Overview errors.

The latest AI trend is a funny one, as a user has discovered that you can plug a made-up phrase into Google and append it with "meaning," then Google's AI Overview feature will hallucinate a meaning for the phrase.

Historian Greg Jenner kicked off the trend with a post on Bluesky in which he asked Google to explain the meaning of "You can't lick a badger twice." AI Overview helpfully explained that this expression means that you can't deceive someone a second time after they've already been tricked once -- which seems like a reasonable explanation, but ignores the fact that this idiom didn't exist before this query went viral.

Read more