Mysterious ‘security update’ to Google Drive cloud storage locker will break links to some files
- Reference: 1624511170
- News link: https://www.theregister.co.uk/2021/06/24/google_drive_security_update/
- Source link:
The ad giant’s advisory to Workspace admins doesn’t mention the reason for the update, other than saying it’s an enhancement.
The little detail offered states that the update “changes the URLs for some Google Drive files and folders. The new links include a resource key in a file’s URL.”
[1]
“Access to impacted files won’t change for people who have already viewed them or who have direct access, but others might need to request access.”
[2]
[3]
And as Drive is used to share files far and wide, that could mean pain for users.
[4]'Lots of failed startups came out of Campus': Google axes London hub because startup scene 'doesn't need' another 7 floors of workspace
[5]Google opens Workspace to anyone with a Google account, but you'll need to cough up for the good stuff
[6]It doesn't really matter how many of us gripe about Google, nothing can stop it printing billions of dollars
[7]Google is updating Meet so at least you won't have to look at your hollow, careworn face
Admins have been given until July 23 to choose from three options:
Apply the security update with no option for users to remove it — The default for EDU, this option applies the update to all impacted files in your organization.
Apply the security update, but users can remove it for specific files — The default for non-EDU, this option applies the update to all impacted files in your organization.
Remove security update (not recommended) — Links to your files remain the same. There’s no option to remove the security update from folders.
Brace for some inquiries, dear readers, as Google advises that if you choose to apply the update, users will be notified starting July 26, 2021. If you pick the default option of applying the change, users will have until August 25, 2021, to remove the update from impacted files.
If the result of that is grumpy users, you can still change your choice after July 23. However, Drive won’t notify your users of your changes.
Which sounds like fun waiting to happen.
[8]
Google says the update will be rolled out by September 13th, 2021 — 81 days downstream from its notification to admins. Which is at least more than the 31 days Google gave Workspace admins between the announcement and the deadline to act. ®
Get our [9]Tech Resources
[1] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YNRXukQNtORAtxRBaCywVgAAAFI&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YNRXukQNtORAtxRBaCywVgAAAFI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YNRXukQNtORAtxRBaCywVgAAAFI&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[4] https://www.theregister.com/2021/06/21/google_closes_london_campus/
[5] https://www.theregister.com/2021/06/14/google_workspace_free_google_account/
[6] https://www.theregister.com/2021/04/27/google_q1_2021_unstoppable/
[7] https://www.theregister.com/2021/04/21/google_meet_updates/
[8] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/applications&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YNRXukQNtORAtxRBaCywVgAAAFI&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[9] https://whitepapers.theregister.com/
Epic Dodgey
The biggest problem is that the notification email about this looks almost exactly like a Phishing email! Complete with link to 'Go to the Alert Center'
There was no WAY I was going to click that link......
Re: Epic Dodgey
Took me a long while to click it...
Time Traveling Update
"Google says the update will be rolled out by September 13th, 2001 — 81 days downstream from its notification to admins."
Good to see that the update was already applied in 2001... :-p
Re: Time Traveling Update
They chose a date when everybody would be distracted by world events, hoping nobody would notice...
I completely fail to see why this would be necessary... I hope at some point we'll get a proper explanation.
I mean, I don't think they'd bother all their users for shits'n'giggles, and this looks like it will be a major pain in the ads*, even though I don't see any way this could be useful to anybody?
*Leaving autocorrect suggestion, it's appropriate
I got an e-mail from Google Workspace telling me I had an "alert" to review in a very phishing sounding tone. I was almost convinced that it phishing was until I went to log into the console on a different device and this "alert" was telling me about this. Not very impressed at the notification e-mail at all, and the lack of transparency about the problem.
Google fail.
You refuse to tell what the "security" patch does, we refuse to apply it. You tell us it's for our own good, we tell you to cough up the details or go bugger yourself with a rusty salty metal spikey sea urchin.