Pssst...Subscribe to Our Free Newsletter  
 

THE LATEST NEWS
Friday, October 15, 2004

Google Desktop Search: Security Threat?
It's a Feature Not a Bug Department: Looks like I spoke too soon. When I wrote about Google's Desktop search yesterday, I wondered in the back of my mind if there may be some sort of outcry over security just like the massive backlash that hit Goggle's Gmail for keyword advertising in email replies. These things seem inevitable. With nothing to back that and nothing I could tell from my own tests, I found the product innovative. But what a difference a day makes....if you are an idiot who uses a public computer to post email. Read on:

PC World's Tom Spring has an interesting piece on a potentital security threat he uncovered using Goggle Desktop. He wrote, "Google Desktop Search might just be too good. Using the new software, I was able to bypass user names and passwords that secure Web-based e-mail programs and view personal messages sent and received on public PCs. Using Google's new software on a shared computer at the Google booth at the Digital Life trade show floor I was able to easily search for, find, and read private Yahoo e-mail sent on the computer by previous users earlier in the day.

"Marissa Mayer, Google's director of consumer Web products, told me she wasn't surprised. 'This is not a bug, rather a feature,' she says. Google always intended people to be able to index and search Web-based e-mail viewed and composed on PC, she says. Google Desktop Search is not intended to be used on computers that are shared with more than one person, she says. Whether or not Google intended this, I take great pause at knowing any e-mail I write or read on a PC with Google Desktop Search could be called up and read by a complete stranger."

Good to know. Read his whole commentary here.

Is it a feature?



   5 comments      Email this Link


Comments on this Item:
 
This is decidedly a feature. If you use a public computer to send email, sign in with the 'public computer' box checked. If you don't have that option, don't use that computer. If you do, you're basically asking for your email to be available to anyone smart enough to look for it.

Personally, I welcome our new google overlords...



 
Also, I wonder how this software stacks up against the Windows Indexing Service in XP (and 2000, I believe)? Certainly anyone who's concerned about having this sort of search functionality on their desktop should confirm that the indexing service is disabled. (It'll also save you some disk space.)


 
This is not a new security hole. The browser by default will cache your web pages. If you were so inclined you could manually go through the browser cache and pull up all the web pages that were visited on that computer. The Google search mechanism just makes that process easier. (Insanely easy?)

-Matt



 
500MBs for indexing is pretty steep, but I agree, the people who use public terminal to do email are always falling vicitim to keystroke loggers and all sorts of other things.


 
I tried the google disk search beta program. First it objected to the fact that I downloaded it in my capacity as administrator but tried to use it as a plain user. Then it locked up my computer (I use XP professional, and it's hard to freeze it) and did other bad things. Thank God I have GoBack installed...it made all the bad stuff, including the Google Beta, go away...I might try it again, but probably not. Beware.....


Post a Comment

 

 
 

The RealTechNews Official Collection of Interesting Technical Websites
(In Alphabetical Order)

Alice and Bill.com -Hooray!
All About Technology
Apolemia
As the Apple Turns
Adam Bosthworth
Channel 9
Cincom Smalltalk Blog
CodeStore
CompHobby.org
CreativeBits
Cult of Mac
Daily Dose of Excel
Dan Bricklin's Log
Dan Gilmore
eHomeUpgrade
Engadget
Enterprise System Spectator
Fozbaca.org
Fullasagoog
Future Now
Gadgeteer
Gadgetopia
Gadgetryblog

Gemal's Psyched Blog
Geomblog
Gizmo
Gizmodo
 
Good Morning Silicon Valley
Google Blog
Google Weblog
Hack a Day
Hack the Planet
Hackdiary
Impact Lab
Internet Alchemy
I4U
IT Facts
Java.blogs
Joel on Software
Jonathan's Blog
Live Digitally
Lynch, Kevin
Matt Heerema
Mavromatic
Mehack
MobileMag
MobileWhack
Mobitopia
MSNsearch's WebLog
Napsterization.org
Onlineblog.com
PatrickWeb
Paul's Time Sink
Picturephoning.com
Player Blog
Ployer Technology News
 
PVRblog
Release 4.0
RFID Privacy
Scripting News
Scriptygoddess
Search Engine Watch
Shiny Shiny
SiliconBeat
Six Apart
Slashdot
SpaceNews
Swaine's World
Tech Digest
Techdirt
Threadwatch.org
Tip of the Day
UberGizmo
Unofficial Google Weblog
Unofficial Yahoo Weblog
Useit.com
Web-Graphics
What Ralph Knows
Wi-Fi Networking News
Wingedpig.com
Wohl, Amy
Wrist Dreams
Yahoo! Search Blog 
 

 

Don't See Your Favorite Tech Site Here? Contact Us to Add it Today!

 

(Please!!)
 
Subscribe with Bloglines

Hey Gang! Please sign our guestbook and say hello to the whole RealTech community: independent tech lovers like you. Take a sec to say hello. -- Sign it!

Please help us stay independent. Donate whatever you can today. (Even $1 will make a HUGE difference.)

Read Alice and Bill's new Tech Edge Column on PC Mag Online


 


Email the Editors

RealTechNews.com

Google
Search Our Website:
Web RealTechNews.com

Blogroll Me!

Hosted by: Dreamhost
Underground Networks, Inc. Copyright 2005
All Rights Reserved

 
 
 
Sign up for PayPal and start accepting credit card payments instantly.