News: 1624511170

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Mysterious ‘security update’ to Google Drive cloud storage locker will break links to some files

(2021/06/24)


Google has advised administrators of its Workspace productivity suite that it’s set to improve security of its Drive cloud storage locker, but that the fix will break links to some files.

The ad giant’s advisory to Workspace admins doesn’t mention the reason for the update, other than saying it’s an enhancement.

The little detail offered states that the update “changes the URLs for some Google Drive files and folders. The new links include a resource key in a file’s URL.”

[1]

“Access to impacted files won’t change for people who have already viewed them or who have direct access, but others might need to request access.”

[2]

[3]

And as Drive is used to share files far and wide, that could mean pain for users.

[4]'Lots of failed startups came out of Campus': Google axes London hub because startup scene 'doesn't need' another 7 floors of workspace

[5]Google opens Workspace to anyone with a Google account, but you'll need to cough up for the good stuff

[6]It doesn't really matter how many of us gripe about Google, nothing can stop it printing billions of dollars

[7]Google is updating Meet so at least you won't have to look at your hollow, careworn face

Admins have been given until July 23 to choose from three options:

Apply the security update with no option for users to remove it — The default for EDU, this option applies the update to all impacted files in your organization.

Apply the security update, but users can remove it for specific files — The default for non-EDU, this option applies the update to all impacted files in your organization.

Remove security update (not recommended) — Links to your files remain the same. There’s no option to remove the security update from folders.

Brace for some inquiries, dear readers, as Google advises that if you choose to apply the update, users will be notified starting July 26, 2021. If you pick the default option of applying the change, users will have until August 25, 2021, to remove the update from impacted files.

If the result of that is grumpy users, you can still change your choice after July 23. However, Drive won’t notify your users of your changes.

Which sounds like fun waiting to happen.

[8]

Google says the update will be rolled out by September 13th, 2021 — 81 days downstream from its notification to admins. Which is at least more than the 31 days Google gave Workspace admins between the announcement and the deadline to act. ®

Get our [9]Tech Resources



[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YNRXukQNtORAtxRBaCywVgAAAFI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0

[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YNRXukQNtORAtxRBaCywVgAAAFI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YNRXukQNtORAtxRBaCywVgAAAFI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0

[4] https://www.theregister.com/2021/06/21/google_closes_london_campus/

[5] https://www.theregister.com/2021/06/14/google_workspace_free_google_account/

[6] https://www.theregister.com/2021/04/27/google_q1_2021_unstoppable/

[7] https://www.theregister.com/2021/04/21/google_meet_updates/

[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YNRXukQNtORAtxRBaCywVgAAAFI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0

[9] https://whitepapers.theregister.com/

Google fail.

ShadowSystems

You refuse to tell what the "security" patch does, we refuse to apply it. You tell us it's for our own good, we tell you to cough up the details or go bugger yourself with a rusty salty metal spikey sea urchin.

Epic Dodgey

Kispin

The biggest problem is that the notification email about this looks almost exactly like a Phishing email! Complete with link to 'Go to the Alert Center'

There was no WAY I was going to click that link......

Re: Epic Dodgey

John Robson

Took me a long while to click it...

Time Traveling Update

Christo

"Google says the update will be rolled out by September 13th, 2001 — 81 days downstream from its notification to admins."

Good to see that the update was already applied in 2001... :-p

Re: Time Traveling Update

Anonymous Coward

They chose a date when everybody would be distracted by world events, hoping nobody would notice...

Dinanziame

I completely fail to see why this would be necessary... I hope at some point we'll get a proper explanation.

I mean, I don't think they'd bother all their users for shits'n'giggles, and this looks like it will be a major pain in the ads*, even though I don't see any way this could be useful to anybody?

*Leaving autocorrect suggestion, it's appropriate

Anonymous Coward

I got an e-mail from Google Workspace telling me I had an "alert" to review in a very phishing sounding tone. I was almost convinced that it phishing was until I went to log into the console on a different device and this "alert" was telling me about this. Not very impressed at the notification e-mail at all, and the lack of transparency about the problem.

A "practical joker" deserves applause for his wit according to its quality.
Bastinado is about right. For exceptional wit one might grant keelhauling.
But staking him out on an anthill should be reserved for the very wittiest.
-- Lazarus Long