Slashdot Mirror
Google Desktop Search Under Fire
AchilleCB writes "Cnn and many other sources are jumping on the Google-privacy-bash bandwagon, they are carrying stories warning of more privacy implications regarding Google's Desktop Search, "if it's installed on computers at libraries and Internet cafes, users could unwittingly allow people who follow them on the PCs, for example, to see sensitive information in e-mails they've exchanged. That could mean revealed passwords, conversations with doctors, or viewed Web pages detailing online purchases." ... Type in "hotmail.com" and you'll get copies, or stored caches, of messages that previous users have seen. Enter an e-mail address and you can read all the messages sent to and from that address. Type "password" and get password reminders that were sent back via e-mail."
So the actual problem is that public computers aren't secure? Google Desktop Search doesn't do anything more than what a halfway good script kiddies can do. I say that all public computers install the software and plug the permissions problem on the OS. If everyone can SEE the insecurity then the users will either
Choose one or proactively make a "none of the above choice" by doing something about it.
PS we almost freaking died out here - it's been an over an 1 1/2 since the last story.
It's not google's fault that other programs leave data out in the open. The search tool does nothing a regular user couldn't do!
Didn't we already determine that Google has stated Desktop Search is not for use on multiple-user machines and that you can always retrict domains, directories and result types from inclusion despite the fact that the files are still publically accessible.
...google provides this tool, for personal use. Any libraries/public terminals that ALLOW the desktop search are the real problem here, not the desktop search agent itself.
I've been using the desktop search for a week, and find it indispensible now. But, like any good, powerful tools, it can be misused, in a mis-configured enviornment.
Basically, just watch where you surf on a PUBLIC machine. duh.
"The natural progress of things is for liberty to yield and government to gain ground." - Thomas Jefferson
Isn't it time that media start to put up opposition to services that compromise privacy in fundamental ways? I think this bandwagon is one that isn't so bad to have going on.
Google does great things, but without such opposition, they might not keep all issues in proper perspective. The things they mention are very important.
Webmail checked with Internet Explorer DOES apply. ANYTHING visited with Internet Explorer applies.
First of all, GDS does not bypass security or username/passwords. These files are accessible via the IE cache using Windows Explorer anyway. The index is stored in %USERPROFILE%\Local Settings\Application Data\Google\Google Desktop Search
Plus, why are these people have rights to install GDS on library computers? The libraries need to take notice by using a policy control to begin with.
Its a GOOGLE DESKTOP SEARCH tool. It says SEARCH in a screaming font. If that doesn't ring these people's bells, then they need to buy hi-fidelity headphones that are used by chronic deaf.
Blaming the kinfe company when the kid cut itself playing with the knife.
Free XBox, PS2
...it becomes easier to see the "security through obscurity" really doesn't work. It's not that a desktop search compromises security, it's that the security wasn't there in the first place.
I am not your blowing wind, I am the lightning.
It's not as if Google didn't document this. If you're installing this on a public system without any real form of user access control, then you're asking for trouble. Google desktop doesn't do anything that an end-user wouldn't be able to do with a little cache snooping and looking in temp files. Really, Google Desktop doesn't belong on this open of a type of system, and in addition one really shouldn't be using such an insecure system for anything very sensitive.
Maybe Google just needs to make the warning a bit more obvious, like a hug "WARNING: Google desktop allows you to search all files on this computer" or something.
-jason
If I could only live my life with my threshold at 4...
Hey, that stuff is there whether you use Google to show it to you or not. I say we thank our Google Overlords for showing the masses how stupid it is to read e-mail or get passwords on a public terminal.
Wah. Don't install it on public computers. They don't need to search through files anyways.
What is someone going to find if they install this on a library computer? livejournal.com pages? Orlando Bloom pictures? Lyrics to an Eminem CD? chat sessions with pinkkitty5555?
Why do you assume that it is Google's responsibility to determine what may or may be "obviously" private.
People need to be responsible for the own actions.
Where oh where has my Underdog gone?
Some considerations:
In favor of google: I do think they had the intent on creating a usefull tool.
In favor of google: As far as I know, all the information that their desktop search tool exposes can be found in simular ways using a veriety of tools including MS windows own 'find-in-files' search options. In other words, their desktop search tool doesn't go out and break user-protected barriers.
Against Google: Just because your intent is honerable doesn't mean you can ignore privacy concerns.
Against the media (CNN, et.al): No integrity to be found for a while now! Just plain bashing, advertising, manipulating, money-making propaganda.
my $0.02
How much privacy before or after usage of a system in a public place do these people think they actually get? They are public, not your home system.
Also, who would be sending private emails or requestion passwords via a public terminal and not know that this info could be seen after weither the Google utility is installed or not.
I'm called Overhype on this.
GDS runs as a system service and has access to everything.
Google got in bed with MS on this one as they only cache MS Office type docs.
GDS could easily cache file security attributes and filter accordingly based on the logged in user.
You'd all be having a fit if this happened on Linux.
Wait! If we don't search for every private bit of information on public computers, then we could be accused of missing potential advanced warning of the next 911 terrorist plot.
:)
The Google engine should be required under The Patriot Act to forward everything that it finds on every public computer to Homeland Security at connectthedots.gov
Defensive measures such as logout and flushing the cache are acts of terrorism.
You are blaming the violet light maker when it finds those 'stains' on your bed sheet. The stains were already there. You just didn't know and now you are pissed that everybody found out!
Free XBox, PS2
Computers are now at $400 . When computers were $1500, people had no money for security, and they still don't.
This post written under Gentoo-linux with an SCO IP license.
We refer to this fallacy as post hoc ergo propter hoc.
(Well, not "we". I don't actually speak Latin).
-- Will quantum computers run imaginary-time operating systems?
The point is that all the libraries I've been into don't allow you to do any of those things, otherwise they would already be infested with spyware and trojans, and I doubt that those same libraries would be stupid enough to install this google desktop search without knowing what it does. And it's the same with Kinkos, Kinkos actually allows you to install some stuff on there, but they reimage the drive every time a new user goes on there (but unlike what the story seems to suggest, Kinko has been doing this for years -- long before Google even became an household name).
This is a non-issue. This is just a newspaper troll who's taken the issue of the day and combined it with the hottest brand of the day, nothing more.
First off, after using it for several days, I realized that I do NOT want GDS caching my Web activity. I certainly don't have anything to hide in my surfing at work, but to me, GDS's incredible usefulness comes in being able to VERY EASILY AND QUICKLY search for data WITHIN documents currently stored on my PC. This is proving to be an invaluable tool at work.
Anyway, as for being installed on public PC's, the problem is not Google's, but those who permit the application to be installed on a public PC in the first place. Any PC administrator who permits user-installable applications in a public environment is asking for problems, headaches, and potential litigation.
Let's just hope this news doesn't get spun wrong and opens people's eyes to security...
My mom always said, "Jim, you're 1 in a million." Given the current population, there are 7000 of me. God help us all!
I would be intrested to know how you would do this.
Currently all software defines things that are private that are.
1) encrypted.
2) Access control handed over by the operating system.
Anything other then that is fair game. The problem isn't google. It is the software on a public machine or the user who doesn't know better.
> Google got in bed with MS on this one as they only
> cache MS Office type docs.
MSFT released filters allowing developers to get at the content of Office docs. Office is the prevalent productivity suite used. Why is GOOG in bed with MSFT?
> GDS runs as a system service and has access to
> everything.
No, there's an entry in HKEY_CURRENT_USER\...\CurrentVersion\Run that starts everything. That means it runs as the current user.
My big problem with Google Desktop Search is not the privacy issues, but the fact that it indexes all my email. By that I mean ALL my email, including spam. It is rather annoying to perform an seemingly innocent search and get the first hit being "Bu|y V|agra , Us|e you|r B|G D|CK!" Especially if my manager is looking over my shoulder.
Life is like a web application. Sometime you need cookies just to get by.
How is it possible the users can install ANYTHING (not just Google Desktop) on public internet terminals or in libraries?
Seems to me focusing on the WRONG problem.
THIS THING CAN TURN ON A DIME, MACROSSZERO STYLE ALSO FUCK BETA, ~NYORON
(no new windows, no downloads of software, no access to drive)
So how would one download the Googlebar?
"The object of war is not to die for your country, but to make the other bastard die for his." - Patton
Ok, you guys are amazing. Let's put this into context. Microsoft comes out with this great tool called ActiveX. It allows all kinds of wonderful things to happen, especially rich content in emails. Uh-oh, someone finds out that this technology is a great way to F around with folks' email since it's so integrated in Outlook (just using Outlook as an example, won't even go there with Windows). Bad, M$, no bone. Nevermind the users who don't know to simply turn off active scripting, they're not the problem - it's Microsoft - since software manufacturers should understand that all users are dumb. Enter Google. All data that's currently on the PC is presented in a highly searchable manner, even to people who have no idea about privacy issues involving electronic data. Stupid users, you shouldn't put such data there, don't you know how every application you've ever used persists data? It's obviously not Google's fault you're so stupid.
Allow me to describe for you living-in-yo-mamas-basement geeks how 6 billion people operate:
The average user has no idea of the security implications of simply going to a public computer and using the facilities provided for them.
If they've ever bought a computer before, they did not buy it from a store with a sales rep that gave them a book listing out every privacy/security vulnerability in the OS installed on it, and if they did they didn't read it. They may have never even talked to anyone knowledgeable about it.
Average users don't have conversations with geeks, sitting around talking about why M$ fscking sucks today and how 3l337 they are or how they 0wn3d U or whatever the hell they say. Average users have conversations with other average users about sports and knitting.
It is doubtful the user has a college degree in computer science, engineering, or even went to a technical school.
Not every kiddie is a script kiddie. I would venture to say most kids who use a library aren't script kiddies - script kiddies have computers at home. If you don't believe me, go to any public library with computers in south Atlanta and ask if their parents own a computer.
In a perfect world, it would be awesome if everyone understood the problems with computer privacy, but we have to deal with all those fucking ignorant lusers who don't read slashdot every hour. If Google doesn't understand this, rest assured they will be hounded by privacy counsils until they learn.
Ok, off do to some google credit card searches ;)
I just checked my task manager, and the GDS app consists of three things:
l eDesktopIndex.exe
GoogleDesktop.exe
GoogleDesktopCrawl.exe
Goog
Each of them run as the current logged in user. Therefore, it can only search things that the current user has access to. The database that everything is stored into (the index) is user specific as well, stored in:
%systemdrive%\Documents and Settings\[username]\Local Settings\Application Data\Google\Google Desktop Search\
Other non-admin users do not have access to your index. Obviously, admin users will have access to all non-encrypted files on the machine, and the google desktop search doesn't change that.
Carpe Cerevisi - Seize the Beer
Although I don't care for the desktop search utility,
it's hardly a valid complaint for privacy at a public
facility. It just means the average Joe can now find what most
with any limited knowledge of Windows can already see.
This is hardly worthy of news. It should be titled "Using Public Computers
Leaves Users Open."
Download and install their free program.
Then feel free to install the Google Desktop Search. Although the program tried to access the Internet, Zonealarm blocked it. Presto chango, problem solved and now I have an awesome desktop search on my computer which cannot spy on me.
I am truly sick and tired of all those comments that get moderated as high whenever there's a google story and all seemingly are defensive of google regardless of what.
Let's face it. Google's practices towards privacy have been far from holy and way too intrusive. In fact, they've had an AWFUL record by any objective account. This invitation-only model of builcing up demand for their services as in orkut and gmail is ludicrous; it's such a cheap trick, the scarcity principle, and I can't believe how stuipdly the masses are falling for it, that once they get an orkut or gmail account they'll willingly do anything. Have you filled up an orkut form? pages and pages of information collected, NEVER seen anyone online who wants so much information about someone. The privacy conerns about gmail are also legitimate. It doesn't require you to tell them your life story by filling forms before you can use the service but who needs that when they got your email and can and do scan them. This whole beta excuse is pure BS; Google News has been beta for 3 years now! I have downloaded Google desktop search, but decided not to install it seeing how I already had software solutions that did more and better and without the privacy compromises I would have to make.
Dare anyone mod me down as troll or flamebait on this post and it'd be so much evidence of how sucked up into it many of you are.
1) The current tool runs with Administrator permissions.
This is simply a tiny technical oddity that Google will soon be able to fix.
2) The current tool indexes cache content.
We users don't want that. Even if the fact that it merely exposes underlying OS or app security flaws (by virtue of the power of indexing), it's not likely to impress users if Google brings these things up as search results.
This can be easily fixed by excluding cached content from indexing.
3) Search might move in a direction where global repositories and Web content are accessed using the same query.
This is tough: because it's such a useful feature, many people will want to have it. However, by submitting all your local searches in parallel also to a global search engine that maintains knowledge about your IP and a cookie, Google will soon more about you than your next to kin. This needs a theoretical solution (most likely there needs to be an intermediate layer of anonymization, like Freenet has it).
4) Google might be transferring "interesting" local content they find to their site to spy on you.
I don't believe they do this now, but that doesn't matter. The problem is they might in the future: imagine a fictional country passed a law that allowed their agents to get access to Google's infrastructure to fight a made-up enemy.... Right now, you have to TRUST them, but nobody monitors this in a principled way, so there should be a well-found mechanism in place to render potential temptations meaningless. Freedom is at stake here.
5) Even if you index only your own account, you don't want to see everything all the time. When you're being watched by your nine-year old boy, a search for mum shouldn't perhaps bring up and email revealing somebody close to him will probably die from cancer within 6 months. There are more examples.
This is tough, and it's a conceptual HCI issue, and a social one, not a technical security flaw. One solution could be to introduce a MODE to indicate the privacy/trust level of your context/environment, e.g. "I'm working alone at home", "I'm working in a group of colleagues in my company", "I'm on a public terminal in a busy shopping mall" (some people access their home machines remotely). The problem is somewhat related to watching other people type their passwords: it's always been part of hacker etiquette to look away when somebody logs on to a machine rather than stare on their fingers and take pencil notes. But the search issue is more complex, and there really needs to be a mechanism in place, not a social norm.
In summary, the Google desktop search tool is useful, because it forces us to re-think security and privacy as boundaries between local and global systems are blurred. After all, the network is the computer.
--
Try Nuggets , our mobile search engine. Ask questions in plain English via SMS, across the UK.