Filed under: Internet, Security, Office, Google
Holes in the cloud: consultant finds more flaws in Google Docs
Remember the shouting about the Google Docs privacy lapse a few weeks ago? As it turns out, that was just the tip of the iceberg. Security consultant Ade Barkah has found several more gaps, and they're all just as alarming - if not more so.
Issue #1 appears right at the top of his blog post: an image that he embedded in an unshared document. Apparently all uploaded images can be accessed directly by anyone, as long as they've got the url.
On top of that, Barkah discovered that another user can view past versions of diagrams you insert in a document even after your replace them. As with the image access flaw, finding the previous versions is as simple as replacing the rev=# in the drawing's URI.
Last but not least, users you've previously granted access to your docs but later removed aren't necessarily gone for good. There are certain cases in which they can regain access themselves without you ever knowing about it.
Tin foil hat wearers rejoice, this is further confirmation that just because you're paranoid that doesn't make you wrong.
[via TechCrunch]
I don't know if this is a labor of love or merely the brainchild of four very gifted games designers, but Level Up is a really weird mash-up of gaming elements that you have probably never seen in a Flash game before.
Let's start with the premise itself: Groundhog Day meets Memento. The game experience revolves around 'days': you explore the world and the clock slowly ticks towards the evening. You bounce around picking up gems and talking to the denizens of 'Level Upland'. Eventually you feel tired and head back to ...
Reader Comments (Page 1 of 1)
Jeffrey said 12:28PM on 3-26-2009
"Anyone" is quite different than "anyone, as long as they've got the url".
Reply
Rocketboy said 3:09PM on 3-26-2009
PLEASE GET RID OF PHEEDO!
Nothing like having a link in your RSS feed to a company that Opera flags as distributors of spyware.
Reply