Google Docs Security Breach Levels Playing Field For Microsoft Office … For Now
October 19, 2008 – 3:05 am
One of the positive things about Google Docs is the ability to share documents with anyone you wish.
One of the negative things about Google Docs is the ability to share documents with anyone who may have no idea how the frack heck they got your documents.
This is due to a session management flaw in Google Docs detailed very nicely here:
http://blog.isc2.org/isc2_blog/2008/09/serious-securit.html
Now, you have to admit: Google had Microsoft worried. But then, Google became bigger than big.
Microsoft usually denies security threats, then admits them, then releases the update on Patch Tuesday.
Google mmmm… not so much.
Google’s approach is to place fingers in their ears and continue adding new whiz-bang features without locking down security holes.
What has resulted? People accidentally riding sessions and grabbing documents. OR — People purposely monitoring packet traffic and waiting for unsuspecting users to steal Google Documents.
Microsoft Office: you can use without ever going online.
Google Docs: you are just flapping in the breeze, depending on the magic of SaaS to protect your documents.
Now, I’m going to fix my glass house before I throw anymore stones at Google …. or Microsoft. 
