Google silently fixes Google Base errors

The world's largest search service provider has patched a security vulnerability that could provide an opportunity for an attacker to steal cookies and other information from users who publish new content.

Errors allow hackers to install fake models in small Google Base pages. This problem, also known as cross-site scripting (XSS), has also happened with Google's search engine and Yahoo's mapping program.

" Defects are very easy to detect. It seems that Google did not conduct a thorough examination, so there are still some minor problems in Google Base, " said Jim Ley, an English computer expert who reported the error and received. review

Previously, Google was also criticized for being too tight about the security technology they used for the product. While Microsoft described publicly the steps taken to improve software safety, Google declined to mention the subject and only confirmed it had its own employees in charge of security.

" Google doesn't even e-mail me to acknowledge the error. They silently review and fix. I guess they think what the public doesn't know, they don't need to worry ," Ley wrote on his blog.

Also in the past week, Yahoo, AOL and Verizon jointly set up a standard behavioral adjustment technology on software downloads to reduce the risk of adware and spyware.

This technology managed by TRUSTe (USA), an independent online company, will ensure that download sites must clearly inform whether the software the user intends to download contains adware or any other detection program.

The website will also have to warn people if the software causes any changes in PC settings and users will choose before the download process begins.

The pilot program will be released early next year.