How did Google Docs leakage, problems with registration of migrants and a crickets business

Why are Google documents without the knowledge of users in the search for Yandex? We understand the evening mailing list The Bell.

Photo: Wikimedia Commons

The main news of the day, and, possibly, the weekend was the appearance in the search for Yandex of the Google Documents, which their authors considered private. The search engine has already removed the documents from the issuance, but the question of how they appeared there and whether this could be repeated without a reasoned answer. We tried to figure out what happened.

• How did it all begin. Information that the search results of Yandex and Google have links to Google Docs documents, diverged after the MDK Internet Plot Twitter. The founder of the public Roberto Panchvidze, the founder of the public, according to him, took information from the Zink-Rezinka telegram channel . According to the author of the Canal Zina Maevskaya, the original source was the post on Facebook by the head of the L'OREAL Electronic Commerce Department Mikhail Brakker, published on Wednesday at 19:17. Friends told the defector about vulnerability, he said to The Bell.
• What got into open access. Google Docs opened links to public documents for search engines in 2009, recalls the Medusa situation in his goodanalysis of the situation. Then the company explained that only those files to which are published on a publicly affordable website can enter the issuance-and specially noted that the documents for which the user only created the link available to everyone will not be indexed. But the Bell employees yesterday were able to find their own documents in the issuance of Yandex, for which they were only generated, but they were never published in the public domain publicly available links.
• Explanations of Yandex and Google. Today, Google, in his Russian -speaking blog, explained that any document can get the issuance of search engines - if the user in the settings marked it as a public or published a link on the Internet. Yandex only stated that it does not index pages whose indexation is prohibited in the Robots.txt file of the starting site (this file regulates the access and rights of search engines). In the Robots.txt file on the website doCs.google.com, indexation of open documents is not prohibited. But the statements of both companies do not explain how the documents fell into the issuance of Yandex and why other search engines showed several times less documents.
• A similar case. A former employee of a large Russian Internet company in a conversation with The Bell immediately remembered a loud incident that occurred in 2011. Then, in the issuance of Yandex, 8,000 SMS appeared in the public domain sent to Megafon numbers through the web interface on the operator’s website. Yandex accused megaphone in failure - the administrator of his site did not install the Robots.txt file in the SMS SMS section, the Yandex commentary said (by the way, almost literally the same as today). MegaFon did not agree with this explanation and promised to conduct its own investigation (it was not announced about its results), and information security experts suggested that closed links to SMS could get to the Yandex base through the Yandex.Bar application, which collected user information.
• Version: "Yandex.Browser." The possibility of a similar explanation for yesterday’s incident “carefullysuggests a“ jellyfish ”. According to her version, Yandex could index the links that users opened with the help of Yandex.Browser. In 2015, private links, which (without any violations) collected a browser, already accidentally fell into the database of indexing a search robot. Yandex admitted this and promised that the mistake would not happen again. Today, this version did not comment on the company.
• If there was no error. Links that were not published on publicly available sites should not be indexed, there are special algorithms to check this, another interlocutor of The Bell in a large Internet company. In theory, this means that sharing links even to open Google Docs in the mail or, for example, messengers should be safe: the search engine will find out about them, but they should not appear in the idea in the idea. Based on this version, it would be possible to assume that only those documents that have ever been published on the “open Internet” (for example, by mistake) became available. So or not, they probably know, probably, only Google and Yandex, but do not say.

What am I to me?

Whether the google document was the result of the “Yandex” resulting from the search engine error or only the negligence of the users themselves, we may not recognize. But this is a good warning. If you do not want your files to get into open access, always choose the most stringent security settings in all applications involving joint access to the documents.

MONEY

Business was banned to register migrants

Behind the world championship and fans of fans, everyone missed that on June 27, Vladimir Putin signed a law that would seriously complicate the life of migrants and foreign specialists in Russia. Now employers cannot register them at their address, each visiting must be registered at the place of actual residence. But the landlords in Russia, as a rule, refuse tenants in registration. The law enters into force on July 8 - from that moment many foreigners (lawyers believe that millions) may be in Russia in an illegal position. For example, builders will suffer - it will be difficult to register according to the new rules of all visitors to business, and for violation of migration legislation, legal entities are facing a fine of 400 thousand rubles.

New "Novice" - new sanctions

Great Britain has not yet considered a new case of poisoning a “novice” by an attempt, but reserves the right to demand explanations from Russia - this is a brief retelling of the current reaction of the British authorities to a new poisoning. The main hypothesis remains the connection of the poisoning of Charlie Rowley and Don Rodges with an attempt on Sergey and Julia Skripal in Salisbury: Scotland Yard said that the victims in Eimsbury could come into contact with the venom infected with poison (previously expressed the version that this could be a capacity in which the “novice” was stored during the first poisoning). Nevertheless, if Russia's involvement is proved (and Britain believes that in the first case it is), new response measures are waiting for the country, the head of the Ministry of Internal Affairs Sajid Javid warned in parliament.

Signals

The reward found the hero

Few doubted that those responsible for the results of the latest presidential elections in Russia could not but be rewarded. And the truth: today it turned out that Vladimir Putin with a hidden decree awarded the title of Hero of Russia to the first deputy head of his administration and curator of the domestic political bloc, Sergei Kiriyenko, who also led the state state government for a long time. This is the highest state award in the country. It became interesting to us that, in addition to the bronze bust at home, is relied by the heroes of Russia. If you, too, can be found here .

PRACTICE

Invasion of insects

Unusual news for Russians: about 2 billion people in the world are eating insects, and not only in Asia - in some Finnish restaurants you can find tartlets from locusts with crickets. Superials to these restaurants are probably supplied by a couple of farmers, which specially moved from growing pigs to growing insects: they are easy to breed, they do not need antibiotics, hormones and a large amount of water. Therefore, it is worth preparing for the fact that a dish with locusts will soon be possible somewhere in the center of Moscow: now the global market for edible insects is estimated at only $ 405 million, but, according to forecasts, by 2023 it will increase more than doubled and exceed $ 1 billion.

Forbid everything

Yesterday we talked about a frightening study: applications on a smartphone are most likely not listening to you (but this is not accurately), but they are recorded on the video and screenshots of your screens that are sent to advertisers. Moreover, even if we discard conspiracy fears, applications quite openly use the mass of your personal data. Wired compiled a step -by -step instruction on how on Android, iOS and Windows to see if the installed applications have access to the chamber/microphone/geolocation, etc. And how to limit it or, conversely, resolve it.

Fun

Calm, only calm

Inaccuracy in 98% of cases and zero in the column “Successful detention” - this is how the London Metropolitan tests the system of cameras with the function of facial recognition. As you can understand from the numbers, the system works, to put it mildly, not very accurate. However, the head of the London Metro of Cressida Dick clearly demonstrates to all PR departments of the world how to maintain equanimity even in such difficult situations: it “absolutely suits” the testing process, the metro and did not count on a large number of detentions, and people themselves “expect” law enforcement officers of the introduction and testing of such systems.

Peter Mironenko