Digital Identity , Governance , Privacy
Companies Need to Be Aware of Risks Suparna Goswami (gsuparna) • September 23, 2019A misconfiguration in a Google Calendar function that allows Google to index calendars raises serious privacy concerns because it could lead to inadvertent, broad public exposure of calendars that contain sensitive information, including corporate details, a researcher reports.
See Also: Webinar | Passwords: Here Today, Gone Tomorrow? Be Careful What You Wish For.
Avinash Jain, a security researcher at Grofers, an e-commerce company in India, recently pinpointed the privacy concern involving calendar sharing - the latest in a series of privacy issues he's called attention to at Google, Yahoo and others.
Google Calendar users have several options for sharing their calendar so others can view upcoming events. But Jain discovered that any calendar designated as "public" for sharing gets indexed by Google and then can be viewed by anyone making a Google search query, without the calendar link being shared with them.
Google did not respond to Information Security Media Group's request for comment. But in a reply to Forbes, it stated: "Calendar sharing is private by default for both G Suite and consumer Calendar users. G Suite admins can control the level of d ..
Support the originator by clicking the read the rest link below.
