this post was submitted on 07 Aug 2025
166 points (98.8% liked)
DeGoogle Yourself
13427 readers
316 users here now
A community for those that would like to get away from Google.
Here you may post anything related to DeGoogling, why we should do it or good software alternatives!
Rules
-
Be respectful even in disagreement
-
No advertising unless it is very relevent and justified. Do not do this excessively.
-
No low value posts / memes. We or you need to learn, or discuss something.
Related communities
!privacyguides@lemmy.one !privacy@lemmy.ml !privatelife@lemmy.ml !linuxphones@lemmy.ml !fossdroid@social.fossware.space !fdroid@lemmy.ml
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
I was of a firm belief that Google and Apple will never be breached. They might be bad at privacy but they are good at security. First time for everything.
Let's not forget that Apple iCloud was breached in 2014: https://en.wikipedia.org/wiki/2014_celebrity_nude_photo_leak
This was not a breach of iCloud, this was a breach of specific user accounts, as in the user's passwords were guessed or the user gave the attackers their password through social engineering.
Ah yes, the Fappening, great times
Google was also breached in Operation Aurora (2009), although a much more targeted breach:
https://en.wikipedia.org/wiki/Operation_Aurora
TIL
i doubt that anyone is immune.
I know but these are the guys I would trust with my data (security wise)
these are the guys that are fucking over society and our future.
Google has 182k employees as of 2023 (at least according to Wikipedia). There's no way to have that many people and not have one slip up once in a while.
Important stuff is usually handled by few of them.
Few thousand*
FTFY
But did they? It looks like Salesforce was breached, where Google stored details of businesses, or did I miss something?
If a company uses an insecure vendor that gets breached, isn't that still, by defnition, a breach of the company's data?
If you outsource your security to a less-than-reputable company, don't be surprised when you get less-than-reputable security.
In a sense, kind of. But it doesn't demonstrate penetration of infrastructure built and maintained by Google. So there's perhaps a judgment issue, but not a demonstration of their own security capabilities being compromised.
Yes. It may deflect some of the legal responsibility, but it's still more of a "how they got breached" than "they didn't get breached."