A bug in Google Docs allowed strangers to take screenshots of your documents

GOOGLE has confirmed that it has fixed a glitch in Google Docs uncovered back in July 2020 that could allow hackers to steal screenshots of your private word documents.
Google has confirmed that it has finally patched a glitch in Google Docs which had allowed hackers to read your documents. The flaw was discovered back in July 9, 2020 by a security researcher, known only as Sreeram KL, who was awarded $3,133.70 as part of Google's bug bounty program. Google offers between $500 and $31,337 for the most severe attacks identified by researchers, so based on the monetary value assigned by the team at Google, this clearly wasn't the most concerning glitch – it could still be pretty problematic.
The bug was discovered in the Send Feedback and Help Docs Improve features, which allow users to submit screenshots and notes about the online app to help the engineers at Google fix any issues, or implement new functionality that users have suggested. When users agree to send a screenshot with their complaint, the image isn’t taken by Google Docs, but rather, by Google.com.
This saves Google the hassle of duplicating its screenshot function across a dizzying number of its online apps, including Docs, Slides, YouTube, Maps and more.
Instead, the screenshot feature was built to handle requests from all of these various Google apps. However, a flaw in the system meant that hackers could capture screenshots from Google Docs sent by users without their knowledge. This was possible due to a weakness in the URL structure being employed by Google, which made it possible to anticipate the incoming screenshots.
So, hackers could siphon off screenshots of issues within these documents. Given that millions of people rely on Google Docs for education, work, and personal notes – this was a serious issue.

Views: 55

©ictnews.az. All rights reserved.

Facebook Google Favorites.Live BobrDobr Delicious Twitter Propeller Diigo Yahoo Memori MoeMesto

04 March 2021

Minister Rashad Nabiyev met with ministry’s employees who took part in Patriotic War

Minister of Transport, Communications and High Technologies Rashad Nabiyev met with the employees of the

Compal’s Airttach laptop may be the best triple-screen concept we’ve seen yet

When on the go with a laptop, one of the biggest complaints tends to be a lack of screen real estate, especially

Verizon support says you should turn off 5G to save your phone’s battery

Despite its relentless promotion of 5G phones and the fact that it spent more than $45 billion bidding on a new

Xiaomi and Realme announce Qualcomm chip shortage

Xiaomi and Realme are victims of a shortage of chips signed Qualcomm. The two Chinese manufacturers confirm

MediaTek announces MT9638 AI chipset for next-generation 4K Smart TVs

MediaTek, the Taiwan-based chipset maker, has been a market leader when it comes to chips powering the Smart TVs

03 03 2021

Bill Gates prefers Android over iOS smartphones

The iPhone vs Android debate has been around for years with significant backers on both sides. Apple’s iPhone

Strategy Analytics: Cellular IoT Connections to reach 3.5 Billion by 2030

According to the latest research from Strategy Analytics, 5G comprised less than 1

Global Semiconductor Sales Increase 13.2% year-to-year in January

The Semiconductor Industry Association (SIA) today announced global semiconductor industry sales were $40.0

Kuo: Apple could launch 8-inch foldable iPhone and notch-less iPhone in 2023

Ming-Chi Kuo’s analyst note today includes a range of predictions for iPhone 13, the next iPhone SE and iPhone