Tech: Google Desktop v3 security risk?

Subject: Tech: Google Desktop v3 security risk?
From: jeffp
Date: 20 Mar 06 - 02:59 PM

Our company just issued a warning about Google Desktop v3 and its implications for inforamation security. A quote from the warning: "Several weeks ago, Google released a new version of its popular desktop tool, known as "Google Desktop v3." This tool allows you to access information anywhere, anytime, and to search it easily. You need to know that your acceptance of the Google policy allows Google to access your system and to index all your text-based files." (italics mine)

Thought I'd pass it along for what it's worth. Our IT department is pretty knowledgable, so I tend to believe it.

jeffp

Subject: RE: Tech: Google Desktop v3 security risk?
From: MMario
Date: 20 Mar 06 - 03:01 PM

it's right there in the license agreement. I believe you also agree they can track your movements on the web and that they can push upgrades unto your machine without notifying you.

Subject: RE: Tech: Google Desktop v3 security risk?
From: Bill D
Date: 20 Mar 06 - 03:05 PM

...but they PROMISE they won't tell the govt. anything...unless the govt. insists

Subject: RE: Tech: Google Desktop v3 security risk?
From: Stilly River Sage
Date: 20 Mar 06 - 03:18 PM

Yeah, this is one Google inovation that I haven't bothered to test. I like a lot of their other stuff, and the Google Toolbar is wonderful. Picassa saves a lot of folks the grief of not being able to find photos where they've stashed them. Some of their Beta research tools are excellent. But that desktop one, no, that goes too far.

SRS

Subject: RE: Tech: Google Desktop v3 security risk?
From: JohnInKansas
Date: 20 Mar 06 - 05:13 PM

The Google security breach that has received the most attention from commentators I've seen isn't really that Google can pry stuff out of your computer.

When you compose a document (or other data-containing file) the Google desktop search utility makes an index of it as you are "entering it." If you move the file, it tries to track where you moved it, so the index can be redirected. If you use passwords or encryption for security, it doesn't do a whole lot of good, because the index usually is made before you save and apply the password and/or other restrictions, and the index contains a "snapshot" of the info in the file.

The result of all this is that a file that you encrypt, or save with some other method to restrict access, can't be opened and viewed by unauthorized persons; but if they search on your machine for something in the file, the snapshot - often containing nearly the whole content - shows up as the search result.

Google was promising to do "something" about this one, but I don't know if there actually was a fix released for it. There may also be additional security holes I haven't heard about; but lack of interest has kept me from following this particular utility. With only about 800,000 files on my main hard drive, I just put stuff where I want it and nothing ever gets misplaced.....

(And the bridge is only $1.98, but you'll have to take a 99 year lease on the lakefront property in Yuma, AZ...)

John

Subject: RE: Tech: Google Desktop v3 security risk?
From: Bill D
Date: 20 Mar 06 - 05:26 PM

there are excellent search functions in various free, non-invasive programs that I do NOT have to sign wavers & disclaimers to use. A moderate amount of organization and naming conventions will let me find most things pretty easily.

there is a little program called AgentRansack that is VERY fast at locating files for you..