{"id":1416,"date":"2010-02-17T10:56:48","date_gmt":"2010-02-17T09:56:48","guid":{"rendered":"http:\/\/blog.intego.com\/?p=1416"},"modified":"2010-02-17T10:56:48","modified_gmt":"2010-02-17T09:56:48","slug":"google-buzz-has-multiple-security-issues","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/","title":{"rendered":"Google Buzz Has Multiple Security Issues"},"content":{"rendered":"<p>Google Buzz, the recently-announced social networking tool, designed to integrate with Gmail, the company&#8217;s free, web-based e-mail, has had a rough time since its unveiling. First, the company turned it on for all Gmail accounts, without asking users. Then, its default setting was that users&#8217; contacts were published on their Google Buzz profiles; a serious violation of privacy that Google had to tweak. In addition, mobile users&#8217; locations are posted whenever they send any messages using Buzz, raising other issues.<\/p>\n<p>But beyond that, a cross-site scripting flaw has been found in Google Buzz&#8217;s underlying code.  <a href=\"http:\/\/www.computerworld.com\/s\/article\/9157738\/Security_bug_opens_Google_Buzz_to_hackers\">Computerworld reports<\/a> that attackers can add their own code to &#8220;trusted web sites such as google.com&#8221; and create phishing attacks using Google domain pages. <\/p>\n<p>Unfortunately, Google doesn&#8217;t give a hoot about privacy, with its CEO Eric Schmidt having said, <a href=\"http:\/\/gawker.com\/5419271\/google-ceo-secrets-are-for-filthy-people\">on CNBC<\/a>, &#8220;If you have something that you don&#8217;t want anyone to know, maybe you shouldn&#8217;t be doing it in the first place.&#8221; With a company who has this type of cavalier attitude toward privacy, is it really safe to trust them with confidential information such as e-mail?<\/p>\n<p>For example, Chris Matyszczyk <a href=\"http:\/\/news.cnet.com\/8301-17852_3-10453226-71.html\">writing at CNet<\/a>, recently highlighted the highly personal nature of ads that display on his Gmail page. Is it worth that type of intrusion just to get free e-mail?<\/p>\n<p>Finally, <a href=\"http:\/\/www.computerworld.com\/s\/article\/9157358\/Spammers_already_targeting_Google_Buzz\">spammers have already latched on to Google Buzz<\/a>, so it&#8217;s going to end up like all the other &#8220;social networks&#8221; that are so full of spam that they just become annoying. <\/p>\n<p>You might want to opt out of Buzz; to do this, look at the bottom of your Gmail page for the &#8220;Turn off Buzz&#8221; link and click it. (Though that might not be enough; you may have to <a href=\"http:\/\/news.cnet.com\/8301-17939_109-10451703-2.html\">purge all your followers first<\/a>.) Because if you have a Gmail account and don&#8217;t turn it off, it&#8217;s on by default, and with the number of privacy and security issues found so far, it may be best just to ignore it.<\/p>\n<p>Follow-up: Macworld UK <a href=\"http:\/\/www.macworld.co.uk\/digitallifestyle\/news\/index.cfm\">is reporting<\/a> that EPIC (the Electronic Privacy Information Center) has filed a complaint with the Federal Trade Commission in the US, has filed a complaint against Google for Buzz privacy issues. The <a href=\"http:\/\/redirectingat.com\/?id=803X112722&#038;url=http:\/\/epic.org\/privacy\/ftc\/googlebuzz\/GoogleBuzz_Complaint.pdf\">complaint<\/a>  begins as follows:<\/p>\n<blockquote><p>\nThis complaint concerns an attempt by Google, Inc., the provider of a widely used email service to convert the private, personal information of Gmail subscribers into public information for the company\u2019s social network service Google Buzz. This change in business practices and service terms violated user privacy expectations, diminished user privacy, contradicted Google\u2019s own privacy policy, and may have also violated federal wiretap laws. In some instances, there were clear harms to service subscribers. These business practices are Unfair and Deceptive Trade Practices, subject to review by the Federal Trade Commission (the \u201cCommission\u201d) under section 5 of the Federal Trade Commission Act.\n<\/p><\/blockquote>\n","protected":false},"excerpt":{"rendered":"<p>Google Buzz, the recently-announced social networking tool, designed to integrate with Gmail, the company&#8217;s free, web-based e-mail, has had a rough time since its unveiling. First, the company turned it on for all Gmail accounts, without asking users. Then, its default setting was that users&#8217; contacts were published on their Google Buzz profiles; a serious [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":1717,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"spay_email":"","jetpack_publicize_message":"","jetpack_is_tweetstorm":false},"categories":[13,11],"tags":[60],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v17.4 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<meta name=\"description\" content=\"Google Buzz, the recently-announced social networking tool, designed to integrate with Gmail, the company&#039;s free, web-based e-mail, has had a rough time\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Google Buzz Has Multiple Security Issues  - The Mac Security Blog\" \/>\n<meta property=\"og:description\" content=\"Google Buzz, the recently-announced social networking tool, designed to integrate with Gmail, the company&#039;s free, web-based e-mail, has had a rough time\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/\" \/>\n<meta property=\"og:site_name\" content=\"The Mac Security Blog\" \/>\n<meta property=\"article:published_time\" content=\"2010-02-17T09:56:48+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2010\/02\/Google-Buzz.png\" \/>\n\t<meta property=\"og:image:width\" content=\"128\" \/>\n\t<meta property=\"og:image:height\" content=\"115\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Peter James\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Organization\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#organization\",\"name\":\"Intego\",\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/\",\"sameAs\":[],\"logo\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#logo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png\",\"contentUrl\":\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png\",\"width\":875,\"height\":875,\"caption\":\"Intego\"},\"image\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#logo\"}},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#website\",\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/\",\"name\":\"The Mac Security Blog\",\"description\":\"Keep Macs safe from the dangers of the Internet\",\"publisher\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.intego.com\/mac-security-blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#primaryimage\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2010\/02\/Google-Buzz.png\",\"contentUrl\":\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2010\/02\/Google-Buzz.png\",\"width\":\"128\",\"height\":\"115\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#webpage\",\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/\",\"name\":\"Google Buzz Has Multiple Security Issues - The Mac Security Blog\",\"isPartOf\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#primaryimage\"},\"datePublished\":\"2010-02-17T09:56:48+00:00\",\"dateModified\":\"2010-02-17T09:56:48+00:00\",\"description\":\"Google Buzz, the recently-announced social networking tool, designed to integrate with Gmail, the company's free, web-based e-mail, has had a rough time\",\"breadcrumb\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.intego.com\/mac-security-blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Google Buzz Has Multiple Security Issues\"}]},{\"@type\":\"Article\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#webpage\"},\"author\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/d0c16bd0a4dd8f82d91204f400c8d116\"},\"headline\":\"Google Buzz Has Multiple Security Issues\",\"datePublished\":\"2010-02-17T09:56:48+00:00\",\"dateModified\":\"2010-02-17T09:56:48+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#webpage\"},\"wordCount\":475,\"publisher\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#organization\"},\"image\":{\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2010\/02\/Google-Buzz.png\",\"keywords\":[\"Google\"],\"articleSection\":[\"Security &amp; Privacy\",\"Software &amp; Apps\"],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/d0c16bd0a4dd8f82d91204f400c8d116\",\"name\":\"Peter James\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/www.intego.com\/mac-security-blog\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/0626bfb4ada576ba5aa775322329ad47?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/0626bfb4ada576ba5aa775322329ad47?s=96&d=mm&r=g\",\"caption\":\"Peter James\"},\"url\":\"https:\/\/www.intego.com\/mac-security-blog\/author\/peter\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"description":"Google Buzz, the recently-announced social networking tool, designed to integrate with Gmail, the company's free, web-based e-mail, has had a rough time","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/","og_locale":"en_US","og_type":"article","og_title":"Google Buzz Has Multiple Security Issues  - The Mac Security Blog","og_description":"Google Buzz, the recently-announced social networking tool, designed to integrate with Gmail, the company's free, web-based e-mail, has had a rough time","og_url":"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/","og_site_name":"The Mac Security Blog","article_published_time":"2010-02-17T09:56:48+00:00","og_image":[{"width":"128","height":"115","url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2010\/02\/Google-Buzz.png","type":"image\/png"}],"twitter_card":"summary_large_image","twitter_misc":{"Written by":"Peter James","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Organization","@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization","name":"Intego","url":"https:\/\/www.intego.com\/mac-security-blog\/","sameAs":[],"logo":{"@type":"ImageObject","@id":"https:\/\/www.intego.com\/mac-security-blog\/#logo","inLanguage":"en-US","url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png","contentUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2022\/10\/intego-organization-logo-for-google-knowledge-graph-875x875-1.png","width":875,"height":875,"caption":"Intego"},"image":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#logo"}},{"@type":"WebSite","@id":"https:\/\/www.intego.com\/mac-security-blog\/#website","url":"https:\/\/www.intego.com\/mac-security-blog\/","name":"The Mac Security Blog","description":"Keep Macs safe from the dangers of the Internet","publisher":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.intego.com\/mac-security-blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"ImageObject","@id":"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#primaryimage","inLanguage":"en-US","url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2010\/02\/Google-Buzz.png","contentUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2010\/02\/Google-Buzz.png","width":"128","height":"115"},{"@type":"WebPage","@id":"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#webpage","url":"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/","name":"Google Buzz Has Multiple Security Issues - The Mac Security Blog","isPartOf":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#primaryimage"},"datePublished":"2010-02-17T09:56:48+00:00","dateModified":"2010-02-17T09:56:48+00:00","description":"Google Buzz, the recently-announced social networking tool, designed to integrate with Gmail, the company's free, web-based e-mail, has had a rough time","breadcrumb":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.intego.com\/mac-security-blog\/"},{"@type":"ListItem","position":2,"name":"Google Buzz Has Multiple Security Issues"}]},{"@type":"Article","@id":"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#article","isPartOf":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#webpage"},"author":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/d0c16bd0a4dd8f82d91204f400c8d116"},"headline":"Google Buzz Has Multiple Security Issues","datePublished":"2010-02-17T09:56:48+00:00","dateModified":"2010-02-17T09:56:48+00:00","mainEntityOfPage":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#webpage"},"wordCount":475,"publisher":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/#organization"},"image":{"@id":"https:\/\/www.intego.com\/mac-security-blog\/google-buzz-has-multiple-security-issues\/#primaryimage"},"thumbnailUrl":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2010\/02\/Google-Buzz.png","keywords":["Google"],"articleSection":["Security &amp; Privacy","Software &amp; Apps"],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/www.intego.com\/mac-security-blog\/#\/schema\/person\/d0c16bd0a4dd8f82d91204f400c8d116","name":"Peter James","image":{"@type":"ImageObject","@id":"https:\/\/www.intego.com\/mac-security-blog\/#personlogo","inLanguage":"en-US","url":"https:\/\/secure.gravatar.com\/avatar\/0626bfb4ada576ba5aa775322329ad47?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/0626bfb4ada576ba5aa775322329ad47?s=96&d=mm&r=g","caption":"Peter James"},"url":"https:\/\/www.intego.com\/mac-security-blog\/author\/peter\/"}]}},"jetpack_featured_media_url":"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2010\/02\/Google-Buzz.png","jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_shortlink":"https:\/\/wp.me\/p4VAYd-mQ","amp_enabled":true,"_links":{"self":[{"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts\/1416"}],"collection":[{"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/comments?post=1416"}],"version-history":[{"count":0,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/posts\/1416\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/media\/1717"}],"wp:attachment":[{"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/media?parent=1416"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/categories?post=1416"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/origin.intego.com\/mac-security-blog\/wp-json\/wp\/v2\/tags?post=1416"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}