Search:  

 
 
   News
newer
story category Google Desktop Privacy
Bypassing webmail security
(old news - 01:29PM Friday Oct 15 2004)
tags: privacy · software
As mentioned yesterday, Google has come out with a new desktop search feature that allows users to quickly search their files and web-history. Some users, like this blogger for PC World, note the application allows them to bypass user names and passwords that secure Web-based e-mail programs, and view personal messages sent and received on public PCs. "This is not a bug, rather a feature," says a Google spokesman who suggests the software is supposed to search and index all webmail viewed or sent.

Related:
  1. Software That Can See Who You Are
  2. Wesley Clark: P2P a National Security Threat
  3. Hushmail Privacy Limits Revealed
  4. Would You Trust A Former Spyware Firm With Your Privacy?
  5. Mozilla Considering Opt-In Browsing Tracking
  6. Thursday Morning Links
  7. Monday Morning Links
  8. Wednesday Evening Links
Forums » Google Desktop Privacy
view: topics flat text 
Post a:
page: 1 · 2

stltech

join:2002-01-27
Florissant, MO

nice

not a bug! lol

wifi4milez
Big Russ, 1918 to 2008. Rest in Peace

join:2004-08-07
New York, NY

Re: nice

What I REALLY want to know is how to clear the cache of this information so it can't be found! Anyone know?
DSLrgm
Premium,MVM
join:2002-08-22
Oak Park, MI

Re: nice

said by wifi4milez See Profile:
What I REALLY want to know is how to clear the cache of this information so it can't be found! Anyone know?
Standard processes:

Clear your cache, history, location, and cookies.

Do NOT have your browser 'remember' your password.

Just all those things you are suppose to do anyway......

wifi4milez
Big Russ, 1918 to 2008. Rest in Peace

join:2004-08-07
New York, NY

Re: nice

Thats good becuase I do that already. I thought there might be some hidden file or folder that I/we were unaware of.

Thanks

Laughing



LMAO! Google says NO but wait until someone gets busted for file sharing or porn that has been ferreted out of the pc without you knowing it. Or some loose cannon that works for Google searches your machine for passwords and such.

For those of you worried about the cache cleanup you can use Zone Alarm firewall it has a cleaner that works well.
Acronis Privacy Manager works.
And System Security Suite works too and is free.

ViniTheHat
Hat Trickery
Premium
join:2002-09-29
Brooklyn, NY

i love exciting features!

my SUV was designed to roll over. it adds excitement!
--
Let the good times roll.
navalpatel

join:2003-07-28
Lubbock, TX

Re: i love exciting features!

lmfao...
kpatz
MY HEAD A SPLODE
Premium
join:2003-06-13
Manchester, NH

Re: i love exciting features!

Public PCs should be configured to clear browser cache and history when the browser is closed. Then search tools wouldn't have this "flaw".

Google's tool is just indexing files on the hard drive. You can browse the cache on your PC and find stuff on there yourself, with or without Google.
--
Robert Tappan Morris, Jr., got six months in jail for crashing 10% of the computers that Bill Gates made $100 million crashing last weekend.
claudeo

join:2000-02-23
Redmond, WA

Re: i love exciting features!

Even if you set the browser to clear the cache and history automatically, that will only happen if the exit is clean and without problem. If you go check the IE cache directories after "clearing" by IE, you will often find lots of leftover stuff.

ronnieg56
A Survivor
Premium
join:2003-03-13
Gotham City
clubs:

said by ViniTheHat See Profile:
my SUV was designed to roll over. it adds excitement!

The problem is that it might roll-over on me.

--
rg56

Phucker
Premium
join:2001-09-12
Reno, NV
clubs:

Holy shit!

big security issues here. Especially for a public machine.

It makes screen captures as well.

I found my bank statement in its cache and it just brings it up.

tcp1
Premium
join:2000-04-17
Herndon, VA
·Sprint Mobile Broa..
·Verizon FIOS
·Comcast
·ViaTalk
·T-Mobile US
·Bandwidth.com


1 edit

Re: Holy shit!

Oh, whatever. Learn how to use a computer. That stuff is there anyways - Google is just FINDING IT, for chrissakes. Windows search would do the same thing, just slower.

Dumb user interfaces and lowered expectations have raised a generation that has no idea what's going on behind their shiny browser window, and that's a problem.

Your web mail has ALWAYS been in your cache. Don't fault google just for the fact that their utility finds the damn files.
Zemus420

join:2004-02-19
Dallas, TX

Re: Holy shit!

This guy make me feel DUMB

jap
Premium
join:2003-08-10
038xx
·RoadRunner Cable

Re: Holy shit!

said by Zemus420 See Profile:
This guy make me feel DUMB
lol - Well don't sweat is too much. He hit the nail on the head, IMO: it's a socially engineered ignorance systemic to human relations with their computers everywhere. You've plenty of company. But tcp1 makes a good point: it's a rather tricky security problem with no technical solution and no quick & easy solution period. There's a world full of powerful systems running GUI-heavy OS's designed to be "user-friendly" at the expense of keeping users ignorant of what transpires behind the GUI. No sign of that trend reversing.

tcp1
Premium
join:2000-04-17
Herndon, VA
·Sprint Mobile Broa..
·Verizon FIOS
·Comcast
·ViaTalk
·T-Mobile US
·Bandwidth.com

Re: Holy shit!


I'm not trying to make you feel dumb.

I'm just saying that for the past 20 years interfaces have been becoming easier and simpler. That's not a bad thing, but the caveat is that everything gets automated, and the user is not required to have any idea what the consequences of his or her actions are.

Think of it as when the day comes when cars drive themselves -- but you don't know what the brake pedal does when that auto-pilot doesn't behave exactly as you expect.

Computers are not simple appliances. Even though the marketing pinheads would like to position them as such, and every Wal-Mart computer purchaser would like to use them as such - it will never happen. If you are storing, sending, and receiving personal information on a device, it has to be stored somewhere. Whether that's in memory or on disk..

Encryption is possible, and should be used wherever possible - but it does slow things down, and does require further engineering and user complexity - since user authentication and the concept of trusted events and resources must now be used.

Note it this way. This problem is not a problem on a computer used by only one person. So, the issue is on multiple user systems. On a multiple user system, if the cache was encrypted (this is not under Google's control), there would have to be a separately maintained cache and authentication system for each user. This adds complexity back to the user interface. Now "Joe User" is complaining as to why he has to log in to his web browser, or create a new profile when he logs on to a public machine. Follow that thread on and on.

G

jap
Premium
join:2003-08-10
038xx

Re: Holy shit!

I think you intended to respond to Zemus420 See Profile rather than my post??

I'm agreeing with you.
Talis

join:2001-06-21
Houston, TX

Why should users have to know the inner workings of the programs they use? Programmers write programs that leave things laying around in a cache somewhere, and its the users fault for not knowing this?

I've seen so many posts like this blaming every woe in the Internet on the 'stupid users.' How will computers and the Internet ever be ubiquitous, useful tools if programmers and industry professionals in general don't step up and start writing programs that are safe and secure?

You are right, this has always been in cache, and Google is just finding it. But the vast majority of general computer users don't know this, and they shouldn't have to know it. You can't require Joe User to have a degree in computer science in order to use a computer or a piece of software 'properly.' Thats totally unrealistic and would be antithetical to the growth of the computer industry.

Instead, the computer industry needs to understand who their audience is and learn how to create safe and secure products for them. Stop blaming my mother for your inability to keep her checkbook secure.

tcp1
Premium
join:2000-04-17
Herndon, VA
·Sprint Mobile Broa..
·Verizon FIOS
·Comcast
·ViaTalk
·T-Mobile US
·Bandwidth.com

Re: Holy shit!

said by Talis See Profile:
Why should users have to know the inner workings of the programs they use? Programmers write programs that leave things laying around in a cache somewhere, and its the users fault for not knowing this?

It's not a question of them having to know EVERYTHING, but so many users have NO CLUE what's going on. "Leave things lying around in a cache?" The cache has to go somewhere. If there was no cache, the "dumb users" would be complaining that things have slowed down.

quote:

I've seen so many posts like this blaming every woe in the Internet on the 'stupid users.' How will computers and the Internet ever be ubiquitous, useful tools if programmers and industry professionals in general don't step up and start writing programs that are safe and secure?

Yes, and likewise, I imagine our highways will never be safe until cars drive themselves and prevent all accidents through mechanical engineering and sensors. The user has to take some responsibility. Thinking you can use a complex system without having even the slightest clue as to what's going on behind the scenes is insanely naive. I'm not saying users should have to be able to write an interface to a binary or flatfile database on their system and manually alter the cache. I think it's reasonable to expect them to understand that when you view a web page, it gets downloaded to your hard drive, and can be viewed by other people that use that computer if you don't take precautions. That's basic.

quote:

You are right, this has always been in cache, and Google is just finding it. But the vast majority of general computer users don't know this, and they shouldn't have to know it.

Why not? So how do you rectify this.. Outright prevent searching of the cache? Maybe some people want to search the cache. Using your logic, wouldn't offering up the option to search the internet cache (which Google does provide, and calls it "web history") just confuse people more?

Google lets you turn it off. So what's the big deal?

quote:

You can't require Joe User to have a degree in computer science in order to use a computer or a piece of software 'properly.' Thats totally unrealistic and would be antithetical to the growth of the computer industry.

A) Expecting a user to know that web pages get stored on their disk is hardly tantamount to having a CS degree.

B) You must not have been around computers very long. I imagine you'd be completely floored by how difficult it was to do something as simple as installing a modem ten short years ago. Hell, even five or six years ago. IRQs, TSRs, IO addresses, jumpers.. You don't know how good you have it. Things ARE easier today.

You can only dumb down a complex system so much until it just stops working properly.

quote:

Instead, the computer industry needs to understand who their audience is and learn how to create safe and secure products for them. Stop blaming my mother for your inability to keep her checkbook secure.

Horrible logic. Who is their audience? Strictly Wal Mart consumers who expect a computer to operate like a VCR? Sorry, if you're storing personal information you might want to know a thing or two about security. You talk about your mother keeping her checkbook secure.. Would you blame the bank for printing necessary account numbers on checks if a cashier copies down her account and routing number?

It's lovely to think the world and the internet is a simple, nice, fluffy place where your 85 year old grandmother can just hop on to AOL with no problems, and that we programmers can engineer out any pitfalls. Too bad it just ain't so, and I'm ticked off that so many armchair quarterbacks are telling engineers how to write software.

Remember, what's simple in your mind may not be so simple in practice. Think logically - HOW could Google have done this otherwise? The files are stored on your disk, by IE and Firefox, not Google, unencrypted. Google allows you to turn this feature off. Where did they fail, other than perhaps making the description of this feature blinking, rotating, and in bright red and yellow?
Talis

join:2001-06-21
Houston, TX

Re: Holy shit!

said by tcp1 See Profile:
A) Expecting a user to know that web pages get stored on their disk is hardly tantamount to having a CS degree.
Thats a true statement. But expecting users to know anything about how a particular application works internally doesn't make sense if you want general joe-blow individuals to use your application.

said by tcp1 See Profile:
B) You must not have been around computers very long. I imagine you'd be completely floored by how difficult it was to do something as simple as installing a modem ten short years ago. Hell, even five or six years ago. IRQs, TSRs, IO addresses, jumpers.. You don't know how good you have it. Things ARE easier today.
I've been working with computers for 20+ years. Things are definitely easier today, no doubt about it. But developers still do not think in terms of safety and security - defensive development would be a good way to say it, with respect to the user.

said by tcp1 See Profile:
You can only dumb down a complex system so much until it just stops working properly.
I disagree. I'm not even suggesting you dumb down anything. I'm saying you make the programs smarter, the interactions between programs smarter, to account for the lack of knowledge of the users.

said by tcp1 See Profile:
Remember, what's simple in your mind may not be so simple in practice. Think logically - HOW could Google have done this otherwise? The files are stored on your disk, by IE and Firefox, not Google, unencrypted. Google allows you to turn this feature off. Where did they fail, other than perhaps making the description of this feature blinking, rotating, and in bright red and yellow?

This isn't Googles problem, and I don't believe I ever said it was. The problem is that the data is laying around in the cache to begin with. It should not be. It isn't that difficult to build protocols that describe sensitive data and protocols that define how applications should treat that data. But the industry as a whole has not cared to address those issues. Until they do, this will continue to be a problem forever, and it isn't the users problem.

Jeremy341
Bye
Premium
join:2000-01-06
localhost

said by tcp1 See Profile:
That stuff is there anyways - Google is just FINDING IT, for chrissakes. Windows search would do the same thing, just slower.
You don't seem to understand how Google's program works. It installs a sniffer on the computer in order to capture certain things. How else could it log AIM conversations if you didn't have another logging program in place?

The point is, it doesn't just search files that are already on your hard drive. It also intercepts and logs network communications.
--
I do not trust Firefox. Spread anything besides that horrid piece of crap.
claudeo

join:2000-02-23
Redmond, WA

Re: Holy shit!

Does it actually intercept communications? I don't read it that way. But if it does that would indeed be a major security issue. The last thing we need is another sniffer.

Jeremy341
Bye
Premium
join:2000-01-06
localhost

Re: Holy shit!

said by claudeo See Profile:
Does it actually intercept communications? I don't read it that way. But if it does that would indeed be a major security issue. The last thing we need is another sniffer.
Yes, it really does. I just installed it (and uninstalled it 10 minutes later) on my computer to check it out and see for myself.
--
I do not trust Firefox. Spread anything besides that horrid piece of crap.

Inflex

join:2002-09-05

Re: Holy shit!

Proof?

Jeremy341
Bye
Premium
join:2000-01-06
localhost

Re: Holy shit!

Install the program and prove it to yourself. I don't have it installed anymore, and I'm not going to install it again.
--
I do not trust Firefox. Spread anything besides that horrid piece of crap.

Inflex

join:2002-09-05

Re: Holy shit!

I'm not interested in proving someone else's baseless claim, thank you.

tcp1
Premium
join:2000-04-17
Herndon, VA
·Sprint Mobile Broa..
·Verizon FIOS
·Comcast
·ViaTalk
·T-Mobile US
·Bandwidth.com

said by Jeremy341 See Profile:
said by claudeo See Profile:
Does it actually intercept communications? I don't read it that way. But if it does that would indeed be a major security issue. The last thing we need is another sniffer.
Yes, it really does. I just installed it (and uninstalled it 10 minutes later) on my computer to check it out and see for myself.

It does NOT "intercept communications". It searches files that are on your disk, and would be on your disk anyways. You are misinformed and incorrect, Jerw134.

tcp1
Premium
join:2000-04-17
Herndon, VA
·Sprint Mobile Broa..
·Verizon FIOS
·Comcast
·ViaTalk
·T-Mobile US
·Bandwidth.com

Jerw134, you are simply the most alarmist person I've ever seen on this board.

The only thing close to "sniffing" it does is with AIM chats, and it explicitly asks if you want to do that.

Not turning it on is the same as not having it installed at all.

You're installing a SEARCH PROGRAM to find data on your computer. What do you expect it to do? Not look at files or data?

Jeremy341
Bye
Premium
join:2000-01-06
localhost

Re: Holy shit!

said by tcp1 See Profile:
Jerw134, you are simply the most alarmist person I've ever seen on this board.

The only thing close to "sniffing" it does is with AIM chats, and it explicitly asks if you want to do that.

Not turning it on is the same as not having it installed at all.
Alarmist? I'm pointing out what the program does. You're claiming that all it does is look at files that would already be on your hard drive if the program weren't installed, and I pointed out the fact that this is not the case.

I know that you have to give the program permission before it does any of this. I wasn't taking issue with the program, I was taking issue with your misinformation. Please learn how to distinguish between those two things.
--
I do not trust Firefox. Spread anything besides that horrid piece of crap.

tcp1
Premium
join:2000-04-17
Herndon, VA

Re: Holy shit!

We were talking about the WEB HISTORY function, not the AIM function. This is in regards to how it "stores" e-mails.

Jeremy341
Bye
Premium
join:2000-01-06
localhost

Re: Holy shit!

Well I decided to talk about the AIM function, so that interested people could understand more about how the program works.
--
I do not trust Firefox. Spread anything besides that horrid piece of crap.

rchandra
Stargate S G-1 And Atlantis Fan
Premium
join:2000-11-09
14225-2105
clubs:

I know what you mean by "behind the shiny GUI". I was listening to a radio show (supposedly the longest running computer-oriented show, "SoundBytes", on WHAM 1180 in Rochester, NY) about a guy who was having problems w/ his Internet connection. I knew precisely that he had to remove any gateway declaration in his networking configuration files ("GATEWAY=" in either /etc/sysconfig/network or /etc/sysconfig/network-scripts/ifcfg-eth0 on RHL/FC systems) and make sure pppd starts with "defaultroute" as an option, but with all kinds of GUIs and TUIs for networking, it would have been tough to tell this guy how to get things done. Virtually everyone who uses these GUI frontends has no clue whatsoever what's behind them (the ip(8) and pppd(8) commands). If they did, it'd be relatively easy to fix this sort of problem.
--
English is a difficult enough language to interpret correctly when its rules are followed, let alone when a writer chooses not to follow those rules. Blog is here
Jeopardy! replies REALLY suck!

cjsmith
Premium
join:2000-11-03
Villa Rica, GA


1 edit
Here is the Features FAQ's link:
 »desktop.google.com/support/bin/t···opic=111

Pay particular attention to this Q&A as it relates to your security questions:
 How can I remove something from my results?

 Privacy Q & A's
Schnook
I Flatulate On Your Approximate Azimuth.
Premium
join:2004-04-12

1 edit

First, IPO...

...then shareholder value is all.

Users? BAH!

Minimicrosoft built before your very eyes.

antiphishing
Phishing Scam Terminator
Premium
join:2004-06-09
Wilkes Barre, PA

[Info] Removing the ads in Gmail with Firefox

Do you find the text ads in GMail to be annoying? If you do, you can use Firefox to hide the ads from displaying.

»www.digitalmediaminute.com/artic···om-gmail
»addict3d.org/index.php?page=view···&ID=3416
--
Dslreports.com Forum No-Spin zone starts here.
»www.antihotmail.com
spammers_are_scumbags@antihotmail.com

DreamCarr
Winter Sucks.
Premium
join:2001-04-16
6D 6F 6F 00

Re: [Info] Removing the ads in Gmail with Firefox

said by antiphishing See Profile:
Do you find the text ads in GMail to be annoying? If you do, you can use Firefox to hide the ads from displaying.

»www.digitalmediaminute.com/artic···om-gmail
»addict3d.org/index.php?page=view···&ID=3416

i honestly dont even see the ads... there're kinda low-key
--
I don't have a beer gut, I have a protective covering for my rock hard abs
joebear29

join:2003-07-20
Alabaster, AL
What does this have to do with the topic?

exocet_cm
In memory of dadkins
Premium
join:2003-03-23
New Orleans, LA
clubs:
·Cox HSI
·Suddenlink
·Cingular Wireless
·AT&T Southeast
·Charter Pipeline

Hold up...

Your telling me that you can use this google desktop to bypass security features designed to keep your stuff secure?

With that in mind, doens't this pose a security risk?

BTW: That SUV thing was great! kudos for you!
--

I know that God is real, but I don't think He created this vast universe just for us.
Seti@Home & Seti@Boinc

tcp1
Premium
join:2000-04-17
Herndon, VA
·Sprint Mobile Broa..
·Verizon FIOS
·Comcast
·ViaTalk
·T-Mobile US
·Bandwidth.com

Re: Hold up...

Again, exocet, you too need to learn how things actually work.

It's not bypassing anything. The files are already there in your cache. Anybody with an IQ over six could find them and read them, whether Google Desktop is installed or not. Google is just including them in the search of your machine.

Yeah, put security risk in bold because there are hackers EVERYWHERE just trying to find out what you ordered from Amazon!

You're causing pointless panic.

Somebody please try to spin this, huh? How exactly is this creating a !!!SECURITY RISK!!! that wasn't already there?

exocet_cm
In memory of dadkins
Premium
join:2003-03-23
New Orleans, LA
clubs:
·Cox HSI
·Suddenlink
·Cingular Wireless
·AT&T Southeast
·Charter Pipeline

Re: Hold up...

Never mind then, if the files are in the cache then your right, my little sister could get to em.

The google desktop is not a security risk because the files are already there, it's just allowing the user of the program "easier" access to the files. So whatever was a risk before is still a risk now, no difference.

quote:
Again, exocet, you too need to learn how things actually work.
That is why I ask

Other than the above suggestions about clearing the cache, would enabling "Do not save encrypted pages to disk" prevent e-mail on an encrypted page to save to the disk?
--

I know that God is real, but I don't think He created this vast universe just for us.
Seti@Home & Seti@Boinc

tcp1
Premium
join:2000-04-17
Herndon, VA

Re: Hold up...

By all accounts, it should - as long as your access your webmail through HTTPS. Accessing it through HTTP is a bad idea anyways.

exocet_cm
In memory of dadkins
Premium
join:2003-03-23
New Orleans, LA
clubs:

Re: Hold up...

Can just typing HTTPS versus HTTP secure your connection?
russotto

join:2000-10-05
Collegeville, PA

Where bug? THERE bug!

The bug isn't in the search tool. It's in webmail programs which don't indicate that the information shouldn't be cached or in browsers that cache secured data (insecurely).

If it's stored unencrypted on your hard disk, anyone with access to your hard disk can read it; the search tool only exposes that. Probably doesn't even go that far, as I doubt it breaks user security (that WOULD be a bug).

See 8 replies to this post

nixen
Rockin' the Boxen
Premium
join:2002-10-04
Alexandria, VA
·Cox HSI
·Speakeasy


1 edit

If This Wasn't Proof Enough

If the statement "This is not a bug, rather a feature," wasn't proof enough that Google wants to be the next Microsoft, I don't know what is...

Oh well, at least they aren't trying to tell us that 640K is more memory than anyone will ever need.

-tom
--
"Some people have morals, standards and ideals about quality, but I'm an American: I couldn't care less." --Tony Pierce (paraphrased)

Jeremy341
Bye
Premium
join:2000-01-06
localhost

Re: If This Wasn't Proof Enough

said by nixen See Profile:
Oh well, at least they aren't trying to tell us that 640K is more memory than anyone will ever need.
Who has ever said that? And don't say Bill Gates, because that myth was dispelled a long time ago.
--
I do not trust Firefox. Spread anything besides that horrid piece of crap.

nixen
Rockin' the Boxen
Premium
join:2002-10-04
Alexandria, VA
·Cox HSI
·Speakeasy

Re: If This Wasn't Proof Enough

said by Jeremy341 See Profile:
said by nixen See Profile:
Oh well, at least they aren't trying to tell us that 640K is more memory than anyone will ever need.
Who has ever said that? And don't say Bill Gates, because that myth was dispelled a long time ago.

Your mom said it.

And, it doesn't really matter whether Gate did or did not ever utter those words or words similar to them. It's what's called a cultural reference. A cultural reference is something that, when said, most people know to what you're alluding.

-tom
--
"Some people have morals, standards and ideals about quality, but I'm an American: I couldn't care less." --Tony Pierce (paraphrased)

Jeremy341
Bye
Premium
join:2000-01-06
localhost

Re: If This Wasn't Proof Enough

said by nixen See Profile:
Your mom said it.
I thought this was Broadband Reports, not grade school.
--
I do not trust Firefox. Spread anything besides that horrid piece of crap.

nixen
Rockin' the Boxen
Premium
join:2002-10-04
Alexandria, VA
·Cox HSI
·Speakeasy

Re: If This Wasn't Proof Enough

said by Jeremy341 See Profile:
said by nixen See Profile:
Your mom said it.
I thought this was Broadband Reports, not grade school.

And I thought people knew what a cultural reference was when they saw one. Guess we were both wrong.

-tom
--
"Some people have morals, standards and ideals about quality, but I'm an American: I couldn't care less." --Tony Pierce (paraphrased)

aliasrlz
Premium
join:2000-09-01
the world

lol...

have to admit, them saying it is a "feature" instead of a bug is the most ridiculous statement ever made ....

what an idiot ....
--
"Long-winded diatribes are not necessary for one-liner comments (regardless of THE POINT). Something some will never get."

SequimPC
Got Fiber?
Premium
join:2004-02-11
Sequim, WA

google me this....Batman

I don't see the correlation between google and M$???
People just seem to hate anyone who gets ahead these days.
Possibly the poor dot-com bastards from years past, angry they didn't create a decent business/marketing plan.
--
First rule of fiber optics: you do not talk about fiber optics

Combat Chuck
Too Many Cannibals
Premium
join:2001-11-29
Erie, PA

Re: google me this....Batman

The incorrect adage that has been pushed on society that those who succeed could only do so by taking advantage of the little guy rears it's ugly head.

It's just not fair that those guys who came up with something you or I didn't, and would have the gall to actually profit from it.
--
John Kerry- doing for America whatever it is you want him to do for however long you want him to do it; except if you didn't want him to do it in the first place in which case he never did it.

nolancj

join:2002-06-30
Long Beach, CA

This is a joke

Please people, these files already exist. Google just made it easier to find them. Second, turn OFF the " Include secure pages (HTTPS) in web history" option and it won't cache the HTTPS files.

Geeze, RTFM before you get all sensational.

Idiots.

jap
Premium
join:2003-08-10
038xx

Re: This is a joke

Thanks for posting the solution for people who don't know how to secure their cache. That last word does nothing to improve your post, however.

tcp1
Premium
join:2000-04-17
Herndon, VA
·Sprint Mobile Broa..
·Verizon FIOS
·Comcast
·ViaTalk
·T-Mobile US
·Bandwidth.com

Re: This is a joke

Why?

It's tremendously frustrating that problems - such as viruses, hoax e-mails, and other "idiot" actions are caused by users who don't take the time to learn what is going on.

This is at everyone else's expense. There should be some expectation that you have a bit of a clue as to what's going on before you install a program.

If you install a program, refuse to read the manual, and then whine and complain that it's doing something you don't prefer or don't understand, that is completely your own problem, and your idiocy for not using your powers of deductive and inductive reasoning to at least attempt to find out what's really going on.

jap
Premium
join:2003-08-10
038xx
·RoadRunner Cable


1 edit

Re: This is a joke

said by tcp1 See Profile:
Why? It's tremendously frustrating that problems - such as viruses, hoax e-mails, and other "idiot" actions are caused by users who don't take the time to learn what is going on.
It is frustrating - but look at your language: you blame the user for malware!, you say they "caused" it!

The oft displayed BBR gearhead assumption is that users *should* understand PCs & networking which, while it would be nice, is an absurd premise. I could care less about and am ignorant of the inner workings of most systems I depend upon (insurance, my car engine, cow slaughtering) and surely people who make it their livelihood get frustrated with me & everyone for being ignorant about their work. There are many hundreds of millions of computer users and to expect they are all gonna keep their always-on, always-connected systems always clean is silliness. To label them all as idiots is, well, idiotic. The vast majority don't even know what a packet is - nor should they be expected to.

Law makers need to draft laws that have teeth and private-party recourse against spammers, not spam-friendly crap like the canned-spam act. Residential ISPs need to automatically detect malware packets & traffic patterns & disconnect source IPs + communicate to the customer when/why service was disconnected + make it easy for customers to get back online once the problem is fixed. ISPs that consistently spew tainted traffic need to have their IP-ranges blocked by other ISPs. In short, both the players in the connectivity industry and the laws that regulate them need to mature.

This is a young industry that has exploded and there is no small amount of de-bugging to do. That end-users are successfully victimized by other users on the network & don't know it is not surprising. Principally, solutions will come from (or should come from) the legal system, network designs, and OS designs (in that order) not the end-user base.

wwdubbia

join:2002-06-03
Clinton, NY

1 edit

I like it!

This is such a smooth interface, I can see it being used as a stealthy way to spy on someone. I, personally, think it's great. I love the way it groups emails together in conversations similar to gmail.
jmargel

join:2001-03-07
Northumberland, PA

Check this out

QDF filetype:QDF

Type that in google and see what you get. You can obtain people's quicken files, which consists of all their financial records, including credit cards.

Also very easy to do on P2P programs as well. This is only one example of finding out very private information.
claudeo

join:2000-02-23
Redmond, WA

Re: Check this out

A public PC should not contain .qdf files. My concern is about public PCs and Google search. If someone is dumb enough to provide full access to their files to a P2P application that is another story altogether.

tcp1
Premium
join:2000-04-17
Herndon, VA
And it is absolutely no fault of Google if someone's storing a quicken file in a publically accessible place.
claudeo

join:2000-02-23
Redmond, WA

Big boongoogle

The problem is that a public terminal is typically preconfigured and I have no way to change the settings. Now this is one more thing to worry about--I need to go and verify that Google search is not enabled before doing my email.

This is a real world problem, even if your are tech savvy. I was at a conference this week where the only way to access the internet was public PCs that were hard configured. Plugging in my laptop was not an option. Wireless was not an option. VPN was not an option. Carelessly, the IE Tools dialog box was not secured, so I could go and supposedly delete temporary internet files after doing my email, but we all know that doing that from the dialog box usually does not actually remove all temporary files.

Moral of the story: If you use a computer on which the Google toolbar is installed, be careful, be very careful. Why doesn't that thing get installed by default with the "spy" enabling features disabled, requiring some effort (with appropriate warnings) to enable them? Of course this is a minor annoyance compared to the keylogger and other crap that might or might not be installed on an internet cafe computer. But still, why does the Google answer have to be so arrogant? And why are some of the posts here compounding that arrogance by suggesting remedies that are beyond the grasp of the 99% of people for whom computers are just tools do get work done? Do you really expect any normal human being to understand every one of those features with ambiguous names in the Advanced options for IE?

martissimo

join:2001-12-01
Las Vegas, NV
clubs:

Re: Big boongoogle

You make a somewhat valid point and all, but without even going into all the advanced options and all isn't it easy enough to just tell people not to conduct anything that they hope will remain private on a public computer?

private and public imply two very different things

tcp1
Premium
join:2000-04-17
Herndon, VA
·Sprint Mobile Broa..
·Verizon FIOS
·Comcast
·ViaTalk
·T-Mobile US
·Bandwidth.com

Expecting any of your communications on a public computer to remain private is completely unreasonable. It's like talking over a CB vs a phone. There simply is no privacy.

On a private computer that is properly secured with a firewall and a password, this "problem" is not an issue.

So, there is no problem.

alanhdsl
Premium
join:1999-10-09
Phoenix, AZ
·Qwest.net

Re: Big boongoogle

That's really the issue. I try to never conduct any sensitive stuff (banking, etc.) over a public computer. Even ignorning cache files, you could have keystroke loggers or anything else on the PC.

I saw one web cafe where they actually reimaged the hard drive after each user. Extreme, but probably very effective in eliminating spyware.

The same problem with revealing unsecured files exists on the web-search Google. Searching for typical password or logging files will return hits from unsecured web servers.

swilson191

@208.190.x.x

all the pc's at my school are re-imaged with standard image at midnight daily. However, the school allows any user to install any program. i could go to the school at 7:00am and install this on every pc THEN come back and work my way around to all the pc's extracting all the info from 14hrs with a simple search.

Cheddarhead
Ain't Nuthin But A Thang

join:2002-02-19
Hudson, WI

AOhell

Does it work with aol browser? My kids got aohell... would like to put it on there to be a instant message nazi.

Tigger-oN

@dsl.comin

This is a windows problem, not googles

This is far from a google issue. If google can do it, so can anyone else. Instead of targeting google for 'indexing' a hard drive, how about you ask Microsoft for 'real user permissions' (Like on a BSD/UNIX/Linux system).

Vchat20
Landing is the REAL challenge

join:2003-09-16
Warren, OH
clubs:

umm. cached pages anyone?

talk about complete morons. on ANY computer, the browser caches pages to your drive. this includes your webmail messages. after these are cached its all free game by anything on the same system. google is not to blame. if anyone is to blame (even this is questionable), its between the chair and the keyboard.

honestly, i think this is a good feature. although i dont use webmail that often here at home (Outlook Express works fine), if i had any reason to (hotmail for example, after they start charging for OE access), i would appreciate google desktop alot more. its alot easier to search for what i want in google desktop, even if i know its in my webmail, instead of going through the mess of logging in to the webmail site and searching each message individually.

Chang Noi

@vtx.ch

Re: umm. cached pages anyone?

I know GDS just takes snapshots of whats already on my PC, however it is "relatively" simple to clear PC caches. What bugs me is that you can't clear GDS's index cache except by removing and reinstalling. Hopefully enable cache cleaning and reindexing in future releases...

CyLoNiTe

@202.83.x.x

Why all the Fuss?

Hey if u are all so worried about google's desktop search, STOP using it!!! Such a simple solution. Instead of bitching about Google searching your mails and caches, you have an option of not using it. Why use it and then blame Google? Same is the case for the "text-ads" in Gmail. I, personally find them un-intruding and sometimes even useful. Again my solution is, if u dont like ads, leave Gmail!!! Why sign up at all? Use other wonderful mail services like hotmail. Now there's a gr8 mail service . If you can trust Microsoft to create your Operating System , why not trust Google to search your system? Or create your own search proggies like AvaFind

Peace

Cheddarhead
Ain't Nuthin But A Thang

join:2002-02-19
Hudson, WI
·Comcast

Not done

As this is beta version on the google search tool, I hope they add functionality, I notice it doesnt come up with nearly as many results as powerdesks search fucntion. Its fast, but not all inclusive.
--
AMD Athlon XP 1800+, 60gig HD, DVD-Ram Drive, Sony 17" LCD, Geforce FX 5200 Ultra, Turtle Beach Santa Cruz, Creative Inspire 5.1, 3mb Comcast Cable Internet

Ookii

@bbtec.net

Google Desktop

Did you know that Google Desktop can search password protected MS Office files??

Anonymous

@63.109.x.x

Re: Google Desktop

Don't know the intent of your post, but if an application can search a "password protected" file, without the password, then it's obvious the file isn't "protected" at all.
Forums » Google Desktop Privacypage: 1 · 2


Sunday, 08-Nov 14:36:17 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.