3 ms·
Is it really true that one can view a list of the email addresses of the logged in gmail users who are visiting a document one owns? I can see a list of usernam
by jsdalton 17y ago
Is it really true that one can view a list of the email addresses of the logged in gmail users who are visiting a document one owns? I can see a list of usernames of people actively viewing a document I own, but not email addresses.
Because if so, that's the problem right there. It's not a security "design flaw" of some kind -- it's a flat out failure of Google to protect the privacy of its users -- and I have to imagine a violation of its privacy policy.
I don't know, maybe I'm missing something though.
- olefoo 17y agoFor google docs, usernames are email addresses.
- jsdalton 17y agoI see. It should be noted that this assumption is usually, but not always, true. It's possible to create a google account with a non @gmail.com address (I have two myself). I just tested and confirmed that Google Docs shows the local part of the email address but not the domain. So you couldn't be 100% sure that "john.doe" is john.doe@gmail.com, though it would obviously be a pretty solid guess.
- olefoo 17y agoThat's interesting, I would like to know what percentage of Google accounts fall into that category. I find the prospect of linking my casual browsing on sites other than ones I have explicitly allowed being able to resolve my identity for the site owner to be quite irksome. I would take steps against any site that I discovered engaging in such practices on a regular basis. Now looking for a chrome plugin similar to NoScript.
- dangrossman 17y agoI have no Gmail address at all, yet I use quite a few Google Account services. There's no requirement to have a Gmail account or use it as your Google Account login.