360 Security Center in its micro-blog said the discovery Sogou major security vulnerabilities

Absrtact: Recently, 360 Security Center in its micro-Bo said the discovery Sogou major security vulnerabilities, and said the loophole is Sogou browser will be a large number of user account passwords and favorites synchronized to other computers. In the afternoon, Sogou company issued a statement, said the confirmation does not exist this

Recently, 360 Security Center in its micro-Bo said found "Sogou major security vulnerabilities," and said the loophole is Sogou browser will be a large number of user account passwords and favorites synchronized to other computers caused by. In the afternoon, Sogou company issued a statement, said "confirm that there is no such phenomenon", and in the statement implied that there is "unfair competition."

Sogou and 360 thus again become the focus of public opinion. The two sides have held media conference, and forced to push the window to the netizens. The two sides diverging, a network security incident evolution is bewildering.

Sogou Browser is exposed to security vulnerabilities user account information leaked

In the process of fermentation, several domestic TV stations reported the case of dog leakage. November 6, a media reporter personally verified that Sogou browser loopholes in the process. 12th, Beijing television related reports that a user in Shanghai to use Sogou browser, found his computer was synchronized with thousands of other people's account password, he used these passwords, you can easily access to other users account.

In the industry's view, because many network services are linked, a single message may trigger a "chain reaction", resulting in other more important user information is also leaked.

Sogou Browser of Shanghai users Gong told the "China Network" reporter, he used Sogou browser online, accidentally found the computer suddenly appeared in thousands of other websites account password, but these accounts are not their own. Use these passwords easy to login to other people's accounts, including QQ, mailbox, Alipay and other Internet users commonly used network applications.

"For example, these account information will have other people 12306 site password, so you can log on to 12306 sites, to see the user's purchase record, mobile phone number, ID card and other information." Mr Gong told reporters that when he found that Sogou browser leaked the account information, he was in the QQ group released the relevant news, and also took some video information, but at that time many people do not believe.

There are many statements, the truth is confusing

During this period, 360 and Sogou dispute between the two sides have held media conference, and to the Internet users forced to push the window, causing more netizens dissatisfaction and confusion. Many netizens pointed out, whether is the competition is not important, we are only concerned about their own security and vital interests, I hope the relevant departments to give norms, so that netizens rest assured that the Internet!

A network security incident has evolved into a bewildering, but for those who leaked the personal information of innocent netizens, but often is "leaked also white leakage", no one is punished for this or make compensation, highlighting the domestic network information security in the field of problems.

The reporter recently on Sogou and 360 security disputes to the Ministry of Industry and Information Technology, the Department of the relevant officials said that the matter is further investigation.

Network security needs to improve information protection

In recent years, there have been a number of large-scale Internet users information leakage events: December 2011 It Community website csdn site More than 6 million user information was leaked; in March 2012, Dangdang user account has been stolen brush; this October, "Check Open Room" page appeared on the network, Enter the name or ID number to get the information that the queried person registered in some hotels ...

National Computer Network Emergency Technology Coordination Center released earlier in the "2012 China Internet Network Security Report" shows that according to incomplete statistics, 2012, more than 50 of our website user information database on the Internet or through the underground black industrial chain for sale, Which has been confirmed as the real information of nearly 50 million data.

Experts pointed out that the personal information leakage events or similar incidents occurred repeatedly, indicating that China's current Internet personal information protection related laws urgently need to strengthen and improve, but also reflects the current Internet industry personal information protection of the urgent situation.

"Similar phenomenon in the final analysis is because China's relevant legal standards are not sound." "The Great Wall key safety laboratory director Chen Liang said that the oversight bodies did not introduce browser standards, law enforcement departments have no reference standards, enforcement efforts are not in place."

In order to better protect netizens ' information security and maintain the industry order, Chen Liang suggested that a browser standard should be introduced as soon as possible to improve the security of the browser. The second is to invite international authorities to conduct public testing of the browser, and then by the expert assessment, user scoring, the selection of high-quality Internet enterprises, and