Filed under: Internet, Security, Office, Google
Holes in the cloud: consultant finds more flaws in Google Docs
Remember the shouting about the Google Docs privacy lapse a few weeks ago? As it turns out, that was just the tip of the iceberg. Security consultant Ade Barkah has found several more gaps, and they're all just as alarming - if not more so.
Issue #1 appears right at the top of his blog post: an image that he embedded in an unshared document. Apparently all uploaded images can be accessed directly by anyone, as long as they've got the url.
On top of that, Barkah discovered that another user can view past versions of diagrams you insert in a document even after your replace them. As with the image access flaw, finding the previous versions is as simple as replacing the rev=# in the drawing's URI.
Last but not least, users you've previously granted access to your docs but later removed aren't necessarily gone for good. There are certain cases in which they can regain access themselves without you ever knowing about it.
Tin foil hat wearers rejoice, this is further confirmation that just because you're paranoid that doesn't make you wrong.
[via TechCrunch]
With Halloween fast approaching, it's a great time to get in some practice defending your territory against zombies. In Graveyard Shift, you take aim at zombies and other creepy-crawlies, blasting them into splatters of cartoony green guts. It's a casual first-person shooter, and it's very easy to get the hang of - use the mouse to aim, click to fire. Graveyard Shift has at least 15 levels, and it might even have some secret stages I haven't unlocked yet.
They key to getting good at Graveyard Shift is learning to use ...
Reader Comments (Page 1 of 1)
Jeffrey said 12:28PM on 3-26-2009
"Anyone" is quite different than "anyone, as long as they've got the url".
Reply
Rocketboy said 3:09PM on 3-26-2009
PLEASE GET RID OF PHEEDO!
Nothing like having a link in your RSS feed to a company that Opera flags as distributors of spyware.
Reply