Google Calendar Unexpectedly Leaks Private Information
1–10 of 138 posts
Re: Google Calendar Unexpectedly Leaks Private Information
#2Btw. ownCloud 6.0.1 was released yesterday: http://owncloud.org/releases/Changelog
Re: Google Calendar Unexpectedly Leaks Private Information
#3The worst thing about things like this happening is the feeling of helplessness when you can't reach anyone in the company or when they just say "it's not a problem".
Re: Google Calendar Unexpectedly Leaks Private Information
#4A couple of things:
That is expected behaviour, email address in reminders applies coordination. It's basically parsing your command correctly 'email this address'.
Second, the zdnet post you link to towards the end is full of inaccuracies:
Re: Google Calendar Unexpectedly Leaks Private Information
#5Btw. ownCloud 6.0.1 was released yesterday: http://owncloud.org/releases/Changelog
God I love the idea of ownCloud so much but secretly hope it's not written in PHP.
I run a wordpress site for 3 years, and one day a hacker took my site over with a bug from a plugin.
Re: Google Calendar Unexpectedly Leaks Private Information
#6Re: Google Calendar Unexpectedly Leaks Private Information
#7Btw. ownCloud 6.0.1 was released yesterday: http://owncloud.org/releases/Changelog
God I love the idea of ownCloud so much but secretly hope it's not written in PHP. I run a wordpress site for 3 years, and one day a hacker took my site over with a bug from a plugin.
Indeed, that's proof that PHP is bad. And that all other frameworks in other languages don't have bugs that can be exploited.
Re: Google Calendar Unexpectedly Leaks Private Information
#8The worst thing about things like this happening is the feeling of helplessness when you can't reach anyone in the company or when they just say "it's not a problem".
To be fair - they were very quick at responding and asked questions about my disclosure.
The security team is very responsive but for normal users there is no way to communicate with Google.
Re: Google Calendar Unexpectedly Leaks Private Information
#9Btw. ownCloud 6.0.1 was released yesterday: http://owncloud.org/releases/Changelog
God I love the idea of ownCloud so much but secretly hope it's not written in PHP. I run a wordpress site for 3 years, and one day a hacker took my site over with a bug from a plugin.
Something like this will happen with any bad written code. It's not PHP related. But you are right, PHP makes it easy to write bad code. There's no "security" layer build in. I hope ownCloud gets public enought to be secure. If more eyes look at the source they will hopfully do a good job.
Re: Google Calendar Unexpectedly Leaks Private Information
#10A couple of things: That is expected behaviour, email address in reminders applies coordination. It's basically parsing your command correctly 'email this address'. Second, the zdnet post you link to towards the end is full of inaccuracies: https://news.ycombinator.com/item?id=7107554
It's evidently not 'expected' behaviour from the point of view of the user. Just because you happen to put an email address in the title of a calendar event doesn't imply that I expect the software to go and send messages on my behalf.