Google Fixes IE Bug

aussie_a writes "Without accepting blame Google has quickly patched the vulnerability, without requiring users to download a patch. Previously covered by Slashdot, the flaw allowed people to access files and passwords on a computer via any website when viewed with IE while running Google Desktop." From the article: "'Google was able to address the problem quickly because it didn't require changing any code at the user's desktop,' MacDonald said. 'Google applied more stringent security controls on its main site, which shut down the exploit.' The incident does raise important questions about Google as a desktop software vendor and its plans for rolling out future security fixes, said MacDonald. "

Comments

Re:If they can fix stuff at their end... that's co

[molo]

WTF. I thought the whole point of google DESKTOP was that it didn't require any interface to the outside world to work! WHY was google desktop going out to google.com? Isn't the privacy question more important here?

-molo

Re:The bug was Google's...

[estebanf]

Google... MS has nothing to do with this...

Re:If they can fix stuff at their end... that's co

[Mayhem178]

That really depends on how they define "their end." Microsoft, for instance, is obviously of the impression that your computer is their computer, and they can install whatever they want on it. Remember when SP2 came out?

Stages of SP2 Installation:

1. Windows has automatically-downloaded updates waiting to be installed (i.e. SP2). Would you like to install them now?
2. NO
3. Now installing Service Pack 2...
4. CANCEL
5. Are you sure?
6. YES
7. Are you really sure?
8. Freakin' YES!
9. *Disable automatic updates*

Two days later...minding your own business...

1. Windows has automatically-downloaded updates waiting to be installed (i.e. SP2). Would you like to install them now?
2. NO
3. Now installing Service Pack 2...
4. CANCEL
5. Thank you for installing Service Pack 2! Your machine will now reboot.
6. * crying *
7. BSOD