Security experts have found that Google's Jotspot service, which allows people to share online documents, shows user names and email addresses to everyone on the internet.
Ben Edelman, a Harvard Business School professor and security researcher said that, as a result of this flaw, company-sensitive user data is indexed by Google and made accessible on the web.
However, Google said that the problem is due to administrator users failing to make the settings private, and is not a security issue.
It told CNET that the information in these wikis was accessible because they have been set to Public on the Site Permissions page. It insists that users are in control of the information they share, and that if wikis are set to Private, no information will be publicly accessible. It added that Jotspot wikis were private by default, and no information is made public unless the group administrator changes the privacy controls.
CNET said that wiki pages that groups designated specifically as being private could be seen.
Edelman notified Google of the security problems a week ago, and said some of the affected sites were modified to address the situation on Monday. X
Check Out
CNet
|