20120427

Google Drive provides access to the entire Google account


Caveat: do not panic, everything is nice, everything is fine. This post will not create panic, but only briefly informed. Imagine your Google Drive and from Google Docs Online documents created. Displayed locally in the Google Drive software, or your Explorer - but actually there are only links to the documents on Google's servers.
The interesting thing: when you run this shortcut will open the browser - with your account. Full access to documents, mail, calendar & Co - and the whole thing, without that you have entered your user name or your password.
In the whole system, browser, or elsewhere must not be stored username or password - despite everything he has direct access to your entire Google account.
Why? The clicked document, aka link authenticates itself on the logged-Google Drive and passes this token to the browser. Should you perhaps consider times - where you have bigger problems anyway, if someone physically has access to your computer.TrueCrypt , BitLocker and Co to ​​help. via[Caschy]

No comments:

Post a Comment