Death by Google Calendar
the_harlequin writes "Ok, so the title is a little extreme, but it's a possibility. The link gives an example of how easy it is to obtain information about someone who uses Google Calendar, and is unaware of what they're allowing the world to see."
So I should be fine if I simply add some fake reoccurring classes to my calendar. I think I am going to "fake" take up some firearms classes and some marshal arts. It will also not hurt to add something else like, Tuesdays I will have a "fake" pit bull owners club. Or I could just not put flight information in my calendar.
quis custodiet ipsos custodes
Any calendar site can be exploited in this way. As with many aspects of computer usage, user intelligence (posting info w/discretion) and proper privacy settings (think Facebook here) is all that's necessary. I say this is a non-issue, especially for hopefully more-intelligent /. nerds.
Cogito, ergo sum, fosho!
A little extreme?
It should be "Hey, you know, if you publish all your day tasks with all the information, I can use it it for something"
It nothing new. It's just as if a eleven-years-old published his home address in some website - it's known to be done, it's stupid, and the eleven year old is responsible for it.
Same here. If you publish everything, it mean I can see everything, and I can use everything. Duh.
I don't know the answer to, "should we expect more crime?" because of the internet. There are stories in the news about molesters and the internet, but is the internet merely a different avenue for crime? Or does it open floodgates for increased crime?
I don't know that I've seen overwhelming evidence the crime rates have surged -- makes me wonder, is there some expected value for crime rates, regardless of the mechanism? This would make for an interesting study -- to date what I've seen is mostly anecdotal.
The example cited in the article is interesting, but I wonder that it really changes tactics -- a thief, a burglar, usually works on opportunity, and someone's calendar is as reliable in determining what a "household" is doing as the person maintaining that calendar.... My experience has been people maintaining calendars accurately, not so much.
On the uncertainty alone, a criminal would still have to case a target on the chance a calendar entry was inaccurate, an event was canceled but not taken off the calendar, etc.
Credit to the author for giving instructions to make Google calendars private -- an option with which I strongly agree...
First of all, I'd like to point out that this trick only works IF you set your calendar to share with the entire world. This is in no way a way to 'hack' google, as it were.
Furthermore, in the real world, this is very likely rediculous. If I'm a criminal, what are the chances that I'm going to find someone in my area that uses google calendar on a regular basis, AND has a trip or event planned with specific times that tell me when they're going to be out of the house.
If I were trying to steal something, it would be much easier to just get in my car, cruise around, find a house that looks empty, bump/pick the lock, walk in, and take stuff.
http://www.TheGamerNation.com/Forums
Anyone wanna crash Daisy's all girl pool party?
This guy's the limit!
...this is only true if you're "smart" enough to publicly share the calendar with everyone.
By default the caldendar is unshared, so the fault is in the end user.
You can avoid this entirely by simply marking your calendar as "private," or "share with friends only."
This person isn't hacking google, he's simply viewing public calendars. If your calendar isn't public, there's no problem.
Check TFA.
http://www.TheGamerNation.com/Forums
always bullshit when i hear things like this.. its like when the dumb ass that wrote that Google Documentary and made them look like the biggest most horrible big brother company thats out there, all because of how powerful Google Earth is.. FOR SHAME GOOGLE for allowing terrorists to pinpoint locations!! oh come-the-fuck-on.. every bit of satellite imagery that's out there has nothing to even do with google.. governments and scientists work together in providing PUBLIC geographic data.. Google simple is one of the very few people that actually use it..
*plays the Apogee theme song music*
I have this same problem at work with co-workers and Lotus Notes too. They can see everything I put on my calendar by default, unless I purposely block stuff and make it unreadable to them.
"I find it...utterly stupid that people display their lives online..."
Such as a blog?
in other news water banned as can be used as offensive weapon. /captain obvious to the rescue
Promote Charity on Myspace, Show Your Colours!
... ...
July 4th: (all day) Fireworks at Ball's Ballmer's house, bring shoe polish for that head
July 5th: 7am - 11pm - Office. Vista meeting.
July 6th: 7am - 11pm - Office. Vista meeting.
July 7th: 7am - 11pm - Office. Vista meeting.
July 8th: 7am - 11pm - Office. Vista meeting.
July 9th: (all day) 2nd annual Vista release party.
July 10th: 10am - Dan's leather emporium. 5pm - Babysitter. 6pm - Pizza Hut. 9pm - Hell Fire Club w/Melinda.
July 11th: 11am - Sucker punch Steve Job's. 12pm - 6pm - Review MS Bob v2. 8pm - Whiskey a go-go with Ellison.
Task Mangler
WTF is this nonsence as a quote at the bottom of the /. site.
I keep all my personal crap on my own personal computer, where I control it.
Maybe I missed something, but why does one person being out of the house mean the house is empty? What about partners, housemates etc?
Maybe people will discuss you on www.mydeathspace.com.
~jennifer.k~
"Ok, so the title is a little extreme, but it's a possibility
No, it is not a possibility. Is Hemos drinking again? I know it's Labor Day, but that's no excuse.
The tabs in my firefox say "Steve Irwin" "Death by Google"
Not evil my ass
Ubuntu: If at first you don't succeed, blindly slap a sudo in front of it
Oop, sorry. I did like the bit about the pit bulls =)
http://www.TheGamerNation.com/Forums
As others have pointed out here, this only works if you have your Google Calendar set to public. By default (at least with my account) my calendar is already set to private. This supposed "stealing" and "death by calendar" stuff is just hype. This public calendar feature is just that: it's a feature you can add manually to allow other people to see. This is nothing bad. I for one am glad that Google likes to add useful features into their products. If this was an attempt to make Google look evil, it was a pretty poor attempt. RTFA
And now Google knows he is stalking this person. Google knows all.
I have my calendar marked "Public" on Google, and there's no way that this silly article is changing my mind.
This is, to me, akin to the old scare about putting your phone number online.
Do any of you remember? The attitude of the 1990's was: Oh My God Jesus Christ, That Man Has His Phone Number Online! Somebody stop that man, he's a menace to himself, and to Society!
Then I read something Philip Greenspun wrote, where he said: (A) I have X,000,000 gajillion hits on my site per day. (B) My cell phone number is featured prominantly on my website. (C) I have only once received a phone call that was unwelcome, but I have far more many times received phone calls that I wanted (due to the posting.)
Personally, I have never received the unwanted phone call.
I think people have a way of inflating plausible threats to themselves, regardless of the actual risks.
In the event (it has to actually happen several times!) that people start using Google Calendars to raid homes, and in the event that it's statistically significant as far as threats go, I will simply wire up my apartment with cams, hard drives, and redundant offsite storage.
.. of doing exactly what he suggests. Any semi-intelligent person should be able to think up some.
My try:
1. Find some sports club with scheduled activities.
2. Follow home someone that looks like a young professional with a sports bag. You now know their address.
3. Next time that class is on, watch her or his house. If the person leave before the class begins, with their trusted sports bag, you know they are going to the gym. If the person switches off the lights, then you are set!
4. Break in and enjoy the goodies!
This is a lot easier, and you have a bigger chance of figuring out whether the person has anything worth stealing straight away. Fancy clothes is a give-away.
Anyone who uses Google Cal should read this, it'll enlighten the extreme of the possible privacy issues involved with making your calendar public. Thus the user can make an informed decision on whether it should be public or not.
Take out your trust old British .303 rifle, load it up, and have some target practice with all those geese in your yard... I betcha no one will come around any time soon!
"Free software" is a matter of liberty, not price.
The article starts from the base that someone publishes to the world where and when will be some day. That it is in google calendar is just accidental. I dont see headlines saying "death by blog", "death by mailing list", "death by irc", "death by MySpace", "death by YouTube", "death by Flickr", and so on... whatever way you have to publish information about yourself, if you use it to publish in a way or another when and where, can be used to kill you.
Lately many people like to expose their lifes over Internet. I don't know exactly why everyone is doing this but people don't care about giving out names, photos, address, schedules, living details, ... Is like everyone wants to be famous or feel alive. You know "I'm here! Please watch me!".
Finally slashdot admins are really that "do no evil" is just a gimmick. Nowadays, there are quite a few email postings against google, i think this one is second in the same day.
Creativity uninhibited www.kreeti.com
that's last century! Put down you are going to your stingray wrestling lessons!
A quick Google calender search for flights yields:
What looks like a flight crew trip schedule
Various reservation details including a person's name, flight # or reservation number and date
I'd be more worried that a jokester friend would cancel my flight than someone breaking in; one did that to a friend going on a honeymoon (canceled the hotel as a joke)without realizing a convention was in town. Real funny.
Similar results can be had with other keywords. Some can be useful - I noticed some hotels put up event schedules.
I'm a consultant - I convert gibberish into cash-flow.
I found it insanely funny that someone who is basically a blogger would lead with this sentence:
"I find it utterly stupid that people display their lives online."
So I guess after "people" there is an implicit "(other than me)"?
#DeleteChrome
1) Force your browser to HTTPS - Google can handle
:)
2) Do not change the default sharing options on your calendar
3) The articles instructions are not quite accurate: but here is my cleanup for you:
3a) Login to Google Calendar
3b) Click "settings" in the upper-right-hand-corner - this article is old)
3c) Click on the CALENDAR tab
3d) Click on the the Calendar you want to edit from your list
3e) Click "Change Sharing Settings" ( your can find it underneath the "Calendar Address" header
3f) Smack yourself if you shared out your calendar to everyone and reduce your scope
This should protect even the paranoid in a in-depth way
Horns are really just a broken halo.
Not only is your calendar private by default, but if you go in to settings and make it public, it gives you the following warning/confirmation: http://fury.com/assets/are_you_sure.jpg
Voluntarily and explicitly choosing to reveal data to the world isn't a security hole. Being aware of what you say and who you say it to is part of a person's personal responsibility whether they're talking on teh phone in a public place or blogging while on vacation, telling the world what a great time they're having thousands of miles away from their stuff.
Titling the post 'Death by Google Calendar' is just sensationalism and FUD.
Kevin Fox
Some expose the tiniest details of their lives.
And then get upset when their parents read their blogs or something...
Doh...
If you are a creature of habit (like most people), an attacker can know what time you are likely to be at home posting on slashdot/your blog etc. Just a simple sampling of the times you've posted will do.
But hey if you're going to target a physical house, you might as well just watch it first...
Who's reading TFA? You, me, slashdotters and so on. Who isn't? Those that actually have calenders like that, write about their life and their friends on their blogs and have complete webpages containing pretty much every information about them but their SSN.
People are very careless with their data. Why do you think we're losing more and more privacy and there's no public uproar about it? Got nothing to hide, got nothing to hide, right?
Well, this is where this attitude leads to.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
I just tried it myself... I found the _____ Family calendar, which includes (among other things) *when mom and dad visit/return to Florida (and what flight)*kids schedules for various activities *vacation dates overseas *names *address of family *etc.... PRETTY SCARY!!!
How's this different from leaving your garage door remote in your car along with your insurance papers that shows your address? Theives get into your car take your remote and find your address. He/she knows you are out goes to your house and gets in and take everything or worse yet steals your identity and rack up some credit rating damage.
Get up at 8:00am on a Saturday morning of a long weekend and drive around the suburbs looking for campers, minivans, station-wagons being loaded with family and luggage. Or just hit up the beachhouses and cottages in the off-season and steal their liquor and BBQs.
body massage!
So you're saying when I click "Share all information on this calendar with everyone" other people can somehow see my calendar? Holy crap!