Filed under: Internet, Security, Office, Google
Holes in the cloud: consultant finds more flaws in Google Docs
Remember the shouting about the Google Docs privacy lapse a few weeks ago? As it turns out, that was just the tip of the iceberg. Security consultant Ade Barkah has found several more gaps, and they're all just as alarming - if not more so.
Issue #1 appears right at the top of his blog post: an image that he embedded in an unshared document. Apparently all uploaded images can be accessed directly by anyone, as long as they've got the url.
On top of that, Barkah discovered that another user can view past versions of diagrams you insert in a document even after your replace them. As with the image access flaw, finding the previous versions is as simple as replacing the rev=# in the drawing's URI.
Last but not least, users you've previously granted access to your docs but later removed aren't necessarily gone for good. There are certain cases in which they can regain access themselves without you ever knowing about it.
Tin foil hat wearers rejoice, this is further confirmation that just because you're paranoid that doesn't make you wrong.
[via TechCrunch]
Get a WordPress.com Blog
So, just how good at time waster games are you? Think you've got the stuff? Well, The World's Hardest Game 2.0 doesn't think you do.
Yes, amazingly, it's possible to have a sequel to a game called "The World's Hardest Game". It doesn't seem logically possible, since if the first one was actually the world's hardest, how could another one come along and share the moniker? It made me doubt the name in the first place. That is, until I tried the game.
The mechanics of the game are very simple. You are a small red square, ...
Reader Comments (Page 1 of 1)
Jeffrey said 12:28PM on 3-26-2009
"Anyone" is quite different than "anyone, as long as they've got the url".
Reply
Rocketboy said 3:09PM on 3-26-2009
PLEASE GET RID OF PHEEDO!
Nothing like having a link in your RSS feed to a company that Opera flags as distributors of spyware.
Reply