Google app sharing exposes corporate data

By Tim Ferguson, Special to ZDNet Asia
Tuesday, March 10, 2009 11:31 AM

The security of Google Docs has been compromised after a bug caused documents to be shared with the wrong people.

The bug, which gave some Docs users access to documents they weren't entitled to view, occurred between people with whom the document owner, or a collaborator with sharing rights, had previously shared a document.

The problem--which affected around 0.05 per cent of documents on the service--was resolved on last week.

In a statement Google said: "We have extensive safeguards in place to protect all documents, and are confident this was an isolated incident."

According to a blog entry by Google Docs product manager, Jennifer Mazzon, the problem only occurred on certain documents when people carried out a specific sequence of actions.

The bug struck when the document owner or collaborator selected multiple documents and then changed the sharing permissions. Google said spreadsheets were not affected.

In order to fix the issue, Google disabled the sharing rights for collaborators and viewers on affected documents and then emailed the users to let them know that they needed to reinstate their document rights.

Mazzon said the company was also affected by the bug internally and Google has apologised for the problem.

Business and personal users of Google Mail recently suffered a global outage of Google Mail service for several hours, causing some to question the wisdom of keeping so much data in the cloud.

Tim Ferguson of Silicon.com reported from London.


WORTHWHILE?

0

0 votes
Blog

Talkback 1 comments

CARTOON - GOogle leaking like a sieve
Check out my CARTOON & Comment on:

www.pcdisorder.com...
Posted by David Miron on Tuesday, March 10 2009 02:54 PM


Tech Jobs Now!

Search for your ideal tech job:

Release management: Unnecessary evil or Holy Grail?

Tech Management

Though organizations may dread these words, release management is an integral step throughout the software development process. Erica Henson explains more.


Read more »



Buying a projector? Try an LED TV instead

Blog thumbnail

If you're thinking of buying a new projector for your office meeting room, why not consider getting an LED TV instead. LED TVs are similar to LCD TVs except that..... by Lee Lup Yuen

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. hacking
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web