exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Google EveryWhereReward.com Trust Issue

Google EveryWhereReward.com Trust Issue
Posted Jan 9, 2013
Authored by Warning

It appears that Google Wallet may share you information with EveryWhereReward.com, who in turn keeps it eternally.

tags | advisory, info disclosure
SHA-256 | 5edf5546c420caa6f44f33049092f514cc7afff8025d13bb4f4f5990e6450979

Google EveryWhereReward.com Trust Issue

Change Mirror Download
if you do not know already, google wallet shares the following
information with potentially untrustworthy third parties. the
information below that you have entrusted to google may be shared
below as follows.

full name
date of birth
social security number
current address
phone number

this data is shared with a company named EveryWhereReward.com if you
request a balance withdrawal of funds in google wallet accounts. by
the third-parties own admission, they keep this data forever even
AFTER the account is closed. this seems to be a gross violation of
privacy when entrusting data to google. it also means that gov can
subpoena it and other shared data related to your google wallet
account without going through google directly. this is not something
expected.

the company also reveals that numerous departments have access to this
data and it does not appear to be encrypted nor protected well. a
brief glance at the SSL certificate leaks information regarding
backup, qa, and disaster recovery domains associated with the primary
sites. you may want to ask yourself if you think the data is being
adequately protected. the company claims they are authorized to hold
this data by their association with money network (subsidiary of first
data corp).

this is merely a warning to be careful when sharing your data with
google, because it may ultimately end up in places you didnt expect
(eg. an indirect subsidiary of a conglomerate's subsidiary that is
directly partnered with google -- confusing). if in doubt, check your
terms of service.

#warning


Login or Register to add favorites

File Archive:

June 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Jun 1st
    0 Files
  • 2
    Jun 2nd
    0 Files
  • 3
    Jun 3rd
    18 Files
  • 4
    Jun 4th
    21 Files
  • 5
    Jun 5th
    0 Files
  • 6
    Jun 6th
    57 Files
  • 7
    Jun 7th
    6 Files
  • 8
    Jun 8th
    0 Files
  • 9
    Jun 9th
    0 Files
  • 10
    Jun 10th
    12 Files
  • 11
    Jun 11th
    27 Files
  • 12
    Jun 12th
    38 Files
  • 13
    Jun 13th
    16 Files
  • 14
    Jun 14th
    14 Files
  • 15
    Jun 15th
    0 Files
  • 16
    Jun 16th
    0 Files
  • 17
    Jun 17th
    0 Files
  • 18
    Jun 18th
    0 Files
  • 19
    Jun 19th
    0 Files
  • 20
    Jun 20th
    0 Files
  • 21
    Jun 21st
    0 Files
  • 22
    Jun 22nd
    0 Files
  • 23
    Jun 23rd
    0 Files
  • 24
    Jun 24th
    0 Files
  • 25
    Jun 25th
    0 Files
  • 26
    Jun 26th
    0 Files
  • 27
    Jun 27th
    0 Files
  • 28
    Jun 28th
    0 Files
  • 29
    Jun 29th
    0 Files
  • 30
    Jun 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close