Related Stories

  • Twitter company files leaked in Cloud Computing security failure
    Twitter has once again been hit by a lapse of security, this time with a hacker posting a set of internal company documents from the Twitter site and service, lifted from the GoogleApps online data sharing and collaboration system.
  • Can the IT department survive Web 2.0?
    Risk-averse IT departments that are too cautious in their approach to Web 2.0 technologies such as social networking, online applications and cloud computing could be signing their own death warrants.
  • Educating children on data protection
    The use of biometrics and CCTV in school classrooms - installed to protect pupils - may just as easily put them at risk of other dangers. What, then, can be done to prepare our children for the big wide world of data protection? Rob Stringer reports…
  • Coughs and sneezes spread diseases
    Mobile devices can keep business ticking over when human diseases strike, but the devices have viruses of their own, finds William Knight
  • IT strategy @ UK.gov
    The UK government needs to improve its ability to deliver effective IT-based systems at reasonable cost. But the proposed solution could change utterly the relationship between the state and the citizen, reports Ian Grant.

News

Google Docs leaks out private data

10 March 2009

The security rating of cloud computing has taken a battering with news that users of Google's online word processing service - Google Docs - may have shared their data with unauthorised users.

A security flaw in the Google Docs software meant that the documents of some users were flagged as collaborative items, allowing third party users of the service to access - and amend - the files.

In a blog posting, Google said that a small number of users were affected by the issue.

"The inadvertent sharing was limited to people with whom the document owner, or a collaborator with sharing rights, had previously shared a document," says the blog posting.

Curiously, Infosecurity understands that the bug did not affect all the editing features of Google Docs.

Whilst text documents ad presentations could be accessed by third parties, spreadsheet files were not accessible.

Google says it is contacting all the affected users and warning that their files may have been compromised.

The company says that around 0.5% of its registered users were potentially affected by the bug.

In a a prepared statement to users, Jennifer Mazzon, Google's product manager for the Google Docs service, said that, as part of the fix, the company used an automated process to remove collaborators and viewers from the documents that we identified as having been affected.

"We then emailed the document owners to point them to their affected documents in case they need to re-share them."

"We're sorry for the trouble this has caused. We understand our users' concerns (in fact, we were affected by this bug ourselves) and we're treating this very seriously. We hope this explanation provides greater clarity."

 

This article is featured in:
Application Security Internet and Network Security

 

Comment on this article

You must be registered and logged in to leave a comment about this article.