Google Desktop V.3
The release of Google Desktop V.3 has raised serious security and privacy
concerns. Specifically, the "share across computers" feature
that introduces the ability to search content from desktop to desktop
greatly increases the risk to users' privacy. If Google Desktop V.3 is
not properly configured (i.e., if defaults are used), there is the potential
for others to access information from an individual's computer.
UCLA's Applied Security Task Force recommends that individuals seriously
consider the potential for information stored on their computers to be
accessed by others if they enable this feature of Google Desktop V.3 on
their computers.
Employees of the University (whether student, regular staff or faculty)
who have confidential data on their work or home computers should talk
to their Computing Support Coordinators and supervisors before enabling
this feature of Google Desktop V.3. There are both privacy laws and university
policies that could be violated through the installation of this feature,
specifically, SB 1386, HIPPA, FERPA and GLBA. (for more information on
these policies, see BruinTech).
While some of the features of Google Desktop V.3 are enticing to faculty,
students, and staff, it is important to understand how information is
collected, stored, and shared through this application, and the potential
privacy risk to individuals.
Please review and share this information widely.
Individuals with questions about Google Desktop V.3 should talk to their
Campus Computing Coordinators.
Campus Computing Coordinators and Network Coordinators should contact
the Applied Security Task Force for more information at: security@sakai.ucla.edu.
Helpful References:
 Google
Source
UCLA Policies about Protecting Data
For a good summary of the privacy concerns related to Google Desktop V.3, see:
Electronic Frontier Foundation
Technical White Paper from University of Michigan's IT Security group
(Recommended reading for NC's and Help Desk Personnel)
NOTE: This information is brought to you by UCLA's Applied Security Task
Force.
|
