| Security / privacy issue | an_mo | 4/26/12 11:33 AM | I think there is a potentially serious security issue as drive does not require authentication when I click on "visit your google drive on the web" from the tray icon. This gives the browser access to all google apps, including gmail, which I may not |
| Re: Security / privacy issue | Daniel Brierton | 4/26/12 11:46 AM | A very good point. Didn't realise it myself because I'm usually logged into my Google account anyway, but it could definitely be an issue for some. I'm guessing the same probably happens when you open a gdoc, gsheet, gdraw, etc. file. |
| Re: Security / privacy issue | Teresa - Docs & Drive Community Manager | 4/26/12 1:53 PM | Hi all, To clarify - Google Drive doesn't require authentication if you're already logged into your default browser. If you're not logged in, you will be asked to sign in. Teresa |
| Re: Security / privacy issue | an_mo | 4/27/12 8:25 AM | Thanks Teresa, the issue was a bit different. If you sign out from gmail in the browser, you should be asked for authentication again when accessing gdrive from the desktop application. As it is now, if the desktop app is signed in, you can always ac |
| Re: Security / privacy issue | froggy894 | 4/27/12 8:54 AM | I agree with an_mo, the problem is : You can logout of all browser sessions, even quit the browser, but the desktop application stays logged in ALWAYS. Without the desktop application having a passcode or similar security...anyone on your computer ca |
| Re: Security / privacy issue | an_mo | 4/27/12 9:22 AM | I tried disconnecting the account, which of course worked. FOr a while I got confused because it wouldn't let me log in, but then I re-connected again and it had to re-synchronize the files (it doesn't let you re-connect on an existing folder, you ha |
| Re: Security / privacy issue | an_mo | 4/27/12 12:29 PM | I dis some more testing, and maybe there's a bug but I can definitely not confirm the behavior you stated. Steps0) sign out of gmail1) click on "visit your google drive on the web"-> browser opens up on gdrive without requiring authentication2) sign |
| Re: Security / privacy issue | dziegman | 4/27/12 12:32 PM | Hi All! I think you are right... This definitely should not be happening! If the team is able to check the thread again... they may need more info... So, can you provide the following information to speed up the process? - Browser Type and Version |
| Re: Security / privacy issue | an_mo | 4/27/12 12:36 PM | Chrome Version 19.0.1084.36 betaOS X 10.6.8Google drive version 1.0.2891.6813 |
| Re: Security / privacy issue | an_mo | 4/27/12 12:42 PM | It is even worse than that: if you elect to "sign out" from the desktop application, when you try to sign in it will give you an error. You can trick it by trying to sign into another account but then if you go back to the original account, it will t |
| Re: Security / privacy issue | Teresa - Docs & Drive Community Manager | 4/27/12 3:41 PM | Thanks everyone for continuing to follow up. I appreciate the repro steps and additional details. In checking with the team, we do transfer credentials from Drive sync to the browser. This isn't a product bug, but rather by design and consistent with |
| Re: Security / privacy issue | an_mo | 4/28/12 5:40 AM | Thanks |
| Re: Security / privacy issue | BR123456 | 4/30/12 2:38 PM | I just want to echo what others have noted above. This is a MAJOR security problem. I was excited to use Google Drive on my work computer but I like to sign out of Google at the end of the day and this is IMPOSSIBLE with the Google Drive desktop ap |
| Re: Security / privacy issue | BR123456 | 5/3/12 2:26 PM | Google... are you guys going to do anything about this? I was hoping you would have fixed this very serious security flaw by the end of the week, but since you haven't, I am probably going to remove the Google Drive desktop application from my work |
| Re: Security / privacy issue | Jojira | 5/3/12 7:26 PM | It looks like folks here may have found a solution, but if not there is a way to log out of the desktop app. Click on your system tray and right click the Drive icon and Quit.http://www.techradar.com/news/internet/web/hands-on-google-drive-review-107 |
| Re: Security / privacy issue | BR123456 | 5/3/12 9:33 PM | Selecting "Quit Google Drive" does not log you out; all it does it close the program. If you re-start the program (e.g. from Start menu), you will still be logged in, and then clicking on "Visit your Google Drive on the web" still gives full access t |
| Re: Security / privacy issue | liran1 | 5/4/12 1:21 AM | Very good point ! It's a very serious security issue ! Google Drive team please fix it !Please add a password authentication. Thanks |
| Re: Security / privacy issue | NervesToCables | 5/4/12 1:26 AM | Exactly this. I was really excited with Google Drive as I could sync files from my work and home computer. I have soon found out that even when I log out from browser and even shut down Google Drive application on my PC anyone can access my files fro |
| Re: Security / privacy issue | skibster | 5/6/12 2:01 PM | I just realized the same thing. With no browser running, but with Google Drive desktop app installed, all a user has to do is browse to your Google Drive folder and double click on a document. A browser window opens and you are looking at the documen |
| Re: Security / privacy issue | BR123456 | 5/7/12 2:12 PM | Well, that's it - I just removed the program and will never use it again. Google has really dropped the ball on this one; the worst thing is that they seem to not be paying any attention to this problem at all. |
| Re: Security / privacy issue | CraigJMeakin | 5/19/12 2:16 PM | Why are you sharing user accounts (windows logins) at work anyway. If they dont have access to your profile they shouldnt have access to your drive. |
| Re: Security / privacy issue | liran1 | 5/26/12 12:28 AM | Any updates from Google Drive team about this serious security issue ?Is it going to be fixed on the next Google Drive update / release ? |
| Re: Security / privacy issue | lost1597 | 5/27/12 5:19 PM | Any updates on this? I seriously cannot use the product with this severe security issue (it is not a privacy issue, being correct). Also, for those who are saying: "you shouldn't give access to your PC account"; you should consider the scenario of |
| Re: Security / privacy issue | ★GA★ | 5/28/12 6:15 AM | Hi Teresa, if you log out of your Google Apps account in your browser and then double click on a .gsheet or .gdoc file in your local Google Drive folder on Windows XP, you will be automatically signed in into your Google Apps account without asking |
| Re: Security / privacy issue | karenm1122 | 5/29/12 7:53 AM | I hope that Google will send out a notice once this is fixed. This problem is a real security issue for our purposes. I need to be able to keep my documents behind a password. |
| Re: Security / privacy issue | dhan16 | 7/1/12 4:41 PM | |
| Re: Security / privacy issue | dhan16 | 7/1/12 4:42 PM | |
| Re: Security / privacy issue | whendrik | 7/4/12 12:25 PM | |
| Re: Security / privacy issue | dhan16 | 7/4/12 5:05 PM | |
| Re: Security / privacy issue | whendrik | 7/5/12 1:32 AM | |
| Re: Security / privacy issue | Thatch | 7/13/12 4:29 PM | |
| Re: Security / privacy issue | Thatch | 7/13/12 4:32 PM | |
| Re: Security / privacy issue | Bas Braams | 7/14/12 2:46 AM | |
| Re: Security / privacy issue | disbroc | 7/25/12 1:49 PM | |
| Re: Security / privacy issue | Serendipitous | 8/7/12 10:45 AM | |
| Re: Security / privacy issue | whendrik | 8/7/12 11:00 AM | |
| Re: Security / privacy issue | whendrik | 8/8/12 1:00 AM | |
| Re: Security / privacy issue | Serendipitous | 8/9/12 2:07 PM | |
| Re: Security / privacy issue | Serendipitous | 8/9/12 2:10 PM | |
| Re: Security / privacy issue | dankeefe | 10/2/12 3:38 PM | |
| Re: Memory Usage andd Security / Privacy issue - googledrivesync.exe | schurg | 12/24/12 8:41 AM | |
| Re: Security / privacy issue | steve123454321 | 2/11/13 5:17 AM | |
| Re: Security / privacy issue | Peter Laboš | 3/3/13 2:52 PM | <This message has been deleted.> |
| Re: Security / privacy issue | Peter Laboš | 3/3/13 3:16 PM | |
| Re: Security / privacy issue | Peter Laboš | 3/3/13 3:28 PM | |
| Re: Security / privacy issue | Tomas Blanco | 5/16/13 7:45 AM | |
| Re: Security / privacy issue | whendrik | 5/18/13 12:45 AM |