February 20, 2006 9:50 AM PST
Google admits Desktop security risk
- Related Stories
-
More worries about Google Desktop 3
February 15, 2006 -
Google Desktop 3 criticized
February 10, 2006 -
Google updates desktop search tools
February 8, 2006
On Feb. 9, Google unveiled Google Desktop 3, a free, downloadable program that includes an option to let users search across multiple computers for files. To do that, the application automatically stores copies of files, for up to a month, on Google servers. From there, copies are transferred to the user's other computers for archiving. The data is encrypted in transmission and while stored on Google servers.
The risk to enterprises, according to Gartner, lies in how this shared information is pooled by Google. The data is transferred to a remote server, where it is stored and can then be shared between users for up to 30 days.
Gartner said in a report on Thursday that the "mere transport (of data) outside the enterprise will represent an unacceptable security risk to many enterprises," as intellectual property could be transported out of the business.
Google told ZDNet UK on Monday that it recognized the risk, and recommended that companies take action. "We recognize that this is a big issue for enterprise. Yes, it's a risk, and we understand that businesses may be concerned," said Andy Ku, European marketing manager for Google.
Google confirmed to ZDNet UK that data was temporarily transported outside of businesses when the Search Across Computers feature was used, and that this represented "as much of a security risk as e-mail does."
"Theoretically any intellectual property can be transferred outside of a company," Ku said. "We understand that there are a lot of security concerns about the Search Across Computers feature, but Google won't hold information unless the user or enterprise opts in (to the feature)."
Google said that security was the concern of individual businesses. "The burden falls on enterprises to look after security issues," Ku said. "Companies can disable the Search Across Computers facility."
Gartner said that sensitive documents may be inadvertently shared by workers, who may not have specialist knowledge of regulatory or security restrictions.
Google said it was unable to comment on the risks posed when individuals share sensitive information. "Some users may, and some users may not be able to," said Ku, adding that companies should follow their own policies.
"At the end of the day, each company should make its own decision. If they are uncomfortable, they shouldn't enable the feature," Ku said. "It's about what a company deems to be best corporate policy."
Gartner has recommended that businesses use Google Desktop for Enterprise, as this allows systems administrators to centrally turn off the Search Across Computers feature, which it said should be "immediately disabled."
Companies "must also evaluate what they are allowing to be indexed, and whether they are comfortable that they can adequately bar the sharing of data with Google's servers," said Gartner.
Google agreed that Google Desktop Enterprise would better mitigate security risks. "If you're given a choice, choose Enterprise," said Ku.
Tom Espiner of ZDNet UK reported from London.
See more CNET content tagged:
security risk,
Google Desktop,
Gartner Inc.,
Google Inc.,
enterprise
"To do that, the application automatically stores copies of files, for up to a month, on Google servers."
You have to turn this feature on purpose. It's off by default. And no duh it's a security risk. You transfer any data outside your network there's ALWAYS going to be a possibility that someone else could see it.
Honestly, this article is so pointless that I'm amazed anyone took the time to write it.
It's the new "cool thing" to bash Google.
Do it when they deserve it. Not just when you feel like it.
- James
IT managers already know about it and common slobs don't need to worry since it isn't invoked on download.
Non story.
Oh...
There is this great MAC site you should visit...
http://maxxuss.hotbox.ru/
I'm starting to get a rather bitter taste in my mouth at the mention of Google. Moving forward the public must be wary and vocal about Google. If we just sit back and let them, they will walk in and take our privacy.
application is that it allows data to be compromised via the
Internet, which is easy to do. A person has to go to quite a bit of
trouble to smuggle computer data out of a business via a portable
device if the business is being run properly. The advice that
businesses not use Google Desktop 3 is good.
http://www.referat-de.com/referate/Griechisch/1/Griechisch1.php
imposed, but optional for those who choose it.
Google provides people options so they can
decide what they want.
Certain other companies (whom I shall not
mention) try to force customers to 'choose'
their offerings, regardless of what the customer
wants. Thus, the security risks, which are
usually more significant are unavoidable.
And now they want to be able to say what the
customer can and can't do on said software, and
send data about every file to someone other than
the customer. Isn't that a larger security risk?
Yet, they are not giving customers any choice.
DRM. It's a bigger problem.
http://dnka.com
http://desktop.google.com/plugins/tweakgds.html
And before anyone regurgitates the tired argument about "If you have nothing to hide, then what's the problem?", I don't have anything to hide...I'm just tired of rolling over while the the Constitutional protections of the Bill of Rights is shredded in the name of "We're protecting you for your own good."
- Who's fault is this?
-
by Seaspray0
February 22, 2006 8:31 AM PST
- What? A security flaw and nobody is blaming microsoft? The silence is so.... refreshing.
-
Reply to this comment
-
-
See all 22 Comments >>But what did I expect. Ever time it's someone else's security flaw, the MS haters club clamps shut like they were discussing hunting rifles at an animal rights rally.