4 ms·
Security PSA: “Hidden” Content Is Readable in Shared, Readonly Google Sheets
- tectonic 8y agoIf anyone has any questions, please let me know.
- craftyguy 8y agoUm, isn't this how other spreadsheet applications work, by visually hiding -- but not securing -- 'hidden columns/sheets'?
- hjk05 8y agoRead the post, it covers this.
- craftyguy 8y agoI did read the post, and it construes the ability to hide things with 'security'. This is the first time I've heard this expectation that hiding == security, and I say this as a former project manager for ~4 yrs where I and my colleagues lived in spreadsheets. If you want to secure things, you demand credentials and/or encryption. Visually 'hiding' things in a document UI does nothing, it's trivial to parse out the 'hidden' information from the file itself.
- rasz 8y agoExpected this to be about hiding content in Google Docs. I know of some pirate streaming sites using Google Spreadsheet(!) to store encrypted video chunks. JS player pretends to grab data from google docs, decrypts and throws into decoder - user experience doesnt differ from using any other html5 video player while pirates get free, fast and unlimited storage.
- londons_explore 8y agoThere is a near unlimited number of places on the internet to store small chunks of data like this. You could even split them across millions of pastebin pastes. It's only CORS headers stopping many of them being useful, but a Chrome extension or pirate app can easily ignore such things.