Slashdot Mirror
Google Drive Has a Serious Spam Problem, But Google Says a Fix is Coming (howtogeek.com)
Google Drive has a pretty bad spam problem, and it seems Google doesn't care. Spammers can share files that automatically appear in your Drive, and there's no way to stop it. From a report: Google Drive's sharing system is the problem. Since it doesn't offer any sharing acceptance, all files and folders shared with your account are automatically available to you in Drive -- they just show up. To make matters worse, if you only have "View" permission, you can't remove yourself from the share. It's a mess. And to make matters even worse, this is far from a new problem, but Google still hasn't done anything to fix it.
Google got back to us with a statement saying that changes are coming to Drive's sharing features and they're"making it a priority." Here's the statement in full: "For the vast majority of users, the default sharing permissions in Drive work as intended. Unfortunately, this was not the case for this user and we sincerely apologize for her experience. In light of this issue, we are evaluating changes to our spam, abuse, and blocking features that will prevent this kind of activity from taking place on Drive. In the interim, users who are experiencing similar issues can remove themselves from the folder, and the folder should not reappear in either 'My Drive' or 'Shared with Me' unless they revisit it."
Google got back to us with a statement saying that changes are coming to Drive's sharing features and they're"making it a priority." Here's the statement in full: "For the vast majority of users, the default sharing permissions in Drive work as intended. Unfortunately, this was not the case for this user and we sincerely apologize for her experience. In light of this issue, we are evaluating changes to our spam, abuse, and blocking features that will prevent this kind of activity from taking place on Drive. In the interim, users who are experiencing similar issues can remove themselves from the folder, and the folder should not reappear in either 'My Drive' or 'Shared with Me' unless they revisit it."
is that despite their promises, after 6 years there still isn't a google provided linux client.
If the answer is no, then do not expect a fix from google anytime soon.
Google Calendar has the same problem. People can just add appointments/tasks to your calendar. Spammers. I'm at a loss as to how they let this happen.
"If you want to improve, be content to be thought foolish and stupid." - Epictetus
With two factor authentication keeping everyone's phone numbers in a huge database Google has safeguarded the world from bad people.
Google lets spam emails through. And even if they identify it as spam and filter it into my spam folder, if it has a calendar invite, google goes ahead and adds it to my calendar.
Jeezus H Christ, google, connect the fucking dots.
Oh, I know. It's free. And I'm the product.
Either google is doing nothing about it, per the summary. Or they are working on it, per the title and the blurb.
Come on poster step up your game, accuracy is important, even to geeks.
I have never had this problem with Google Drive. My e-mail is old enough that it's on thousands of spams lists. I get email spam but I've never had spam added to my Google Drive (or as some other commentators, Google Calendar). What am I doing right? I'd like to know so I keep doing it.
It's been this way since its inception. The permissions model is awful. For instance, you can assign permissions to users and/or groups. Standard ACL-style permissions, right? But if you and another user to the group, you have to re-share the document/folder with that group, in order for the new user to acquire those permissions. Their suggested solution was to perform this function anytime a group's definition changed. Utterly impractical for groups larger than three, at best.
My UID is prime!
I've never had random things appear in my calendar or drive that I didn't put there myself.
I guess that's a benefit of never giving anyone my actual gmail address, and using my own domain email.
This is so open to abuse and malware, I'm surprised Google even allowed this in the first place.
Because something like this pops up immediately when you do that analysis competently. Makes me wonder what other severe defects they have in there. Better stay away entirely from this train-wreck.
Most ACs are not even worth the keystrokes to insult them. Be generically insulted by this and ignored otherwise.
It amazes me how many people complain about free stuff. If you don't like it, don't use it.
As spammers can leave malicious turds lying about hoping the victim (or some piece or latent javascript) will inadvertently use one. Eventually somebody will get bitten severely enough to notice and sue.
Then it is an arms race. All shared documents are associated with accounts. They can throttle down how much sharing you can do to young accounts. For older accounts they can build links of shared documents and shared editing history. With some amount of AI thrown, they can cut down a lot of spam.
Gmail is pretty good in filtering out spam. Google phone is pretty good in marking incoming calls as possible spam. So they will probably have a more sophisticated way than what a random guy like me posts after two minutes of thinking.
sed -e 's/Chuck Norris/Rajnikant/g' joke > fact
...shut down the service.