Google Drive security hole leaks users’ files Lisa Vaas.
From the post:
We often repeat this advice from former Naked Security writer Graham Cluley: for a better understanding of how you should approach security in the cloud, simply replace all instances of the words in the cloud with the words on somebody else’s computer.
Google just handed us another opportunity to do just that.
It turns out that Google Drive has been incontinent, dribbling out private data courtesy of a security hole concerning files with embedded URLs.
When someone clicks an embedded hyperlink, they get sent to the website of a third-party website owner.
Unfortunately, the flaw was also letting the website owner – an unauthorized party – view header information, potentially including the original document that included the URL.
…
Personally I would replace on somebody else’s computer with:
FVEY + N, where N = you + people who share your data/document.
FVEY:
The “Five Eyes”, often abbreviated as “FVEY”, refer to an anglophonic alliance comprising Australia, Canada, New Zealand, the United Kingdom and the United States. [Five Eyes]
Accidental leaks are nothing compared to the legal/illegal flood gates used by FVEY.
Ask yourself, “Do I feel lucky?”