Google plugs hole in Presentations

By Elinor Mills, CNET News.com
Thursday, September 20, 2007 11:29 AM

Nathan Weinberg at Inside Google sure can write a dramatic blog entry.

For instance, in this one on Google closing a security flaw in its new Presentations feature of Google Docs, he starts out with a screen capture of e-mail addresses that were leaked through that flaw. Of course, the addresses are obscured. It's a graphically appealing but very scary image.

Weinberg explains what happened:

"Google Presentations has a chat feature, based on Google Talk technology, that lets people chat while viewing a presentation. I embedded a presentation here, as did Matt Cutts on his blog, and a number of people linked to it. Everyone who went to that Presentation and logged into their Google Account to chat gave their e-mail address to me and to every other visitor to the chat, without even knowing it.

"The reason is that Presentations logs your chats, just like Google Talk does, and those logs appear in your Gmail Chat folder. While the chat window in the presentation doesn't list e-mail addresses, the logs do, and almost everyone gets them automatically."

Apparently, the breach was live for about 15 hours before it was closed, he says.

A Google representative provided this statement when asked for comment: "We take our users' privacy and security very seriously. We acted quickly when we discovered this bug and delivered a fix: e-mail addresses are no longer archived during presentation chat sessions."

This article was originally a blog post on News.com.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

Hands-on programming: Extract plain text from documents with Syncfusion's components

Web Development

Justin James recently tried Syncfusion's Essential DocIO and Essential PDF to help him extract text from documents he downloaded from the Internet. Here's the code he wrote to get the plain text.


Read more »



Will technology divide us further?

Blog thumbnail

So I finally watched 2012 over the weekend, but the film left me feeling extremely agitated.

The possibility that the world may meet its watery end in three years didn't..... by Eileen Yu

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web