Google Desktop May Pose Security Risk

By Ed Oswald | Published February 21, 2006, 11:43 AM

Google admitted Monday that a security risk exists within the "Search Across Computers" feature in Google Desktop 3 for enterprise users, however it argued the function posed as much of a security risk as e-mail does.

The issue surrounds the way Google caches data on a remote server before sending it to the user's shared computers. In many enterprise environments, such an action would be considered an unacceptable security risk.

The issue was first raised by research firm Gartner, wich warned its clients to only use the version of Google Desktop for Enterprise. Doing so would allow an IT administrator to globally disable the Search Across Computers feature.

Gartner told clients that they "must also evaluate what they are allowing to be indexed, and whether they are comfortable that they can adequately bar the sharing of data with Google's servers."

Google seemed to agree, echoing Gartner's sentiments in public comments on the matter.

It appears as if Google is not going to make any changes in the program, and the company suggests it does not see the issue as a flaw. It should be noted that during transmission, and while archived on Google servers, the information is encrypted.

In any case, Gartner recommends the "immediate disable" of the shared search feature in order to prevent any breach of sensitive data.

Comments

View comments by with a score of at least

DO I have to keep saying it?

..
...
....

Google is the Devil!

Score: 0

|

http://www.userfriendly.org/ read the archives for the last two weeks *grin*.

Score: 0

|

Google Desktop-- an application that caches all your data-- may pose a security risk.... yeah, gee, there's a shocker.

Score: 0

|

and how else would you want it to search trough if not by cacheing your data ???

DUUUUUUHH !!!

Score: 0

|

Oh I dunno, I disable Fast Indexing service on XP, and have just used Windows File Search for years and years... oh yeah, and I take personal responsibility for my own file management so I always know what I call things and where I put them...

Score: 0

|

You might love Locate then: http://locate32.webhop.org/

It builds an index of FILENAMES on all accessible drives. It then provides instant searching - The results from 400,000 filenames pop right up.

Also, you control when it runs and when it doesn't; though I keep it on all the time and have it replace my F3 search.

Score: 0

|

Google Chrome 4: Yes, it's fast, but is it usable?

As Betanews readers have responded to our stories about Chrome's JavaScript superiority...Does that mean we'd actually use this browser? Well...

Video: Netflix on PlayStation 3

Netflix has come to the PlayStation 3 via Blu-ray and BD-Live.

Verizon Wireless launches new Android, Chocolate, and ruggedized phones

The lower-priced Eris joins the Droid, while the Chocolate gets a touchscreen and more music playback.

Early sales figures for Windows 7 nicely high, but do we know why?

Fans of triple-digit surges in figures quoted by Betanews will love this one, as it appears Microsoft rediscovered how to pull off a software launch.

Myka announces its latest Linux-based 'net top box'

Myka's ION brings Boxee, XMBC, and much more to HDTVs.

What hath Mac wrought? A remembrance after a quarter-century

The reason there's a Macintosh today is not because of some brilliant flash of engineering genius, but because Apple had the audacity to learn from its mistakes.

Early build of Moblin 2.1 improves connectivity, but not device support

The Linux Foundation's Atom-centric OS yesterday received a major overhaul with the project release of Moblin 2.1 for netbooks and nettops.

The iPhone's China syndrome: Sales of 5,000 and climbing

There's actually a country where Apple's device is not a godsend, where sales can be measured in the dozens.

New European counterpart to FCC will ensure 'a more neutral net'

Late Thursday night, the ruling telecom administrators of the EU's member nations signed away their final authority to a new entity overseen by the EC.

Sophos study suggests Windows 7 UAC's default setting is self-defeating

Without any anti-virus installed, a Sophos test showed, User Account Control was only capable of thwarting just one malware package out of ten samples chosen.

Indiscreet tweet trips awareness of Web SSL vulnerability

A group of high-level security engineers had been making progress on thwarting a low-level threat to the Web, until somebody blurted it all out on Twitter.