4 ms·
Anecdata - I was using Google docs a few years ago and was shown a complete stranger's document. This was on my own PC that no one else had used or logged into.
by quickthrower2 8y ago
Anecdata - I was using Google docs a few years ago and was shown a complete stranger's document. This was on my own PC that no one else had used or logged into. I immediately logged out and in again and I saw my stuff again. So maybe they do have security issues sometimes.
- emmelaich 8y agoSimilar. I found a spreadsheet in my docs that I had nothing to do with. My only thought was that it was extremely rare hash collision.
- jazoom 8y agoWas it private? I often see things in there and have no idea how they got there, but it seems they get added when you open a URL to someone else's public document, even if you don't let it fully load.
- bjourne 8y agoSimilar thing happened to me. On two occasions, I logged into my Gmail but was shown someone else inbox. This was several years ago and there were lots of reports on the net about similar incidents which I annoyingly can't find now. Google would never admit it and instead claimed PEBKAC, but I believe they had a bug that affected their single-sign on system.
- quickthrower2 8y agoPEBKAC. That is Hilarious. So what ... we accidentally typed a strangers username and password. Or it was a dream. Oh I see they mean Google's chairs and keyboards. That makes sense.
- AnimalMuppet 8y agoThat's definitely a breach of security, but it's a bit different, too. It's not (so far as we know) exploitable. That is, an attacker couldn't use it to get all the documents stored on Google docs. They could, maybe, trigger it to see one random other document. That's still a security breach, but it's not in the same league as exploitable attacks.
- quickthrower2 8y agoI am not sure of the extent because I am not a security researcher and I didn't want to try to exploit it more as an 'amateur' lest I do something illegal. But it is possible there was an exploit at the time.