Google Allo jeopardizes the privacy of online searches

The culprit is Google Assistant which, in some countries, you can already include in Allo chats. Too bad that for a bug it spies the online history

Google Allo is the instant messaging application developed by the Mountain View company to try to challenge WhatsApp and Facebook Messenger. Despite not being used much yet, it seems to have ended up in the spotlight of hackers.

The discovery happened by chance by a user and reported, complete with screenshots, to the site Recode. The fault is Google Assistant, the personal assistant present on Android Nougat 7 and that can support Allo in conversations. It would seem that the virtual assistant shares users’ searches directly on social. The “leak” could have been caused by a temporary and isolated malfunction of the Allo and Google Assistant combo, or by a real bug that would seriously jeopardize users’ privacy.

The Google Assistant leak

Here’s what happened told by the protagonist Tess Townsend. The friend with whom she was chatting, in the middle of the conversation, turns directly to the Google Assistant asking it to identify itself. And surprise, instead of saying a name or responding in kind, the assistant shares a link to the Pottermore site, and specifically, to an excerpt from Harry Potter and the Order of the Phoenix, the fifth book in JK Rowling’s saga.

Tess reports that it wasn’t simply a “non sequitur” – that is, a baseless response, rather, it was the result of some research her friend had done a few days earlier. Not him. Tess also points out that they had not mentioned Harry Potter in the chat at all on that occasion. They reported the anomaly to Google, which responded that “they had been informed that Assistant was not working as expected in group chats and that they had fixed the problem, thanking them for the report.”

Criticism of Google Allo

Allo has recently been criticized by privacy advocates because it doesn’t use end-to-end encryption by default as WhatsApp does, instead. Google Assistant, secondo un report diffuso da The Independent, dovrebbe richiedere l’autorizzazione da parte di un utente prima di condividere informazioni personali in una chat di Allo, ma la funzione di privacy non sembra sempre funzionare. E, ciliegina sulla torta, Edward Snowden – ex tecnico della CIA noto per aver rivelato pubblicamente dettagli di diversi programmi segreti di sorveglianza di massa del governo statunitense e britannico – aveva messo in guardia sulla scarsa sicurezza di Google Allo all’indomani del lancio.

Come difendersi dagli attacchi hacker

Cliccando sui link che seguono, invece, potrete scoprire  suggerimenti, alcuni più tecnici altri più alla portata di tutti, riguardanti la sicurezza informatica e scoprire le tipologie di attacchi più comuni: dagli attacchi DDoS al phishing, passando per le botnet.

  • Dai cyber terroristi ai White hat hacker, ecco chi sono e cosa fanno
  • Proteggere la privacy e dati personali, i consigli dell’esperto
  • Sei consigli per mettere al sicuro la vostra piccola o media impresa
  • Dieci consigli per non cadere nella trappola di una e-mail phishing
  • Come proteggere la tua mail con Password Sicura: cos’è e come funziona
  • Salvarsi dagli hacker: 5 errori da non commettere
  • Allarme virus, trojan e ransomware, la guida per difendersi
  • Cosa sono i ransomware e come si diffonde il contagio
  • Pericolo ransomware: come difendersi con buone pratiche e antivirus
  • Dilemma ransomware: è possibile fermare il “virus del riscatto”?
  • Attacco ransomware: piccole e medie imprese in pericolo
  • Cosa sono gli attacchi DDoS, come nascono e come difendersi
  • Cos’è il phishing? Una pericolosa truffa: ecco come non abboccare
  • Privacy online: ecco come salvaguardare i nostri dati personali
  • Come creare una password forte per proteggere l’identità online
  • Addio ai furti di password, ecco la verifica in due passaggi
  • I migliori password manager per mettere al sicuro i propri dati