Does Google desktop search pose risks?

If you use shared or public computers, you have a new privacy risk to consider: Google Desktop Search.

Announced last week and currently available in a beta version, Google Desktop Search allows you to scour your hard drive for lost or forgotten documents. But it just may be too good at what it does, according to privacy and security experts, who say it poses risks for users who don't understand its power.

Once installed, Google Desktop Search scours a computer for Microsoft Office files, AOL IM chat sessions, cached Web pages, and Outlook and Outlook Express e-mail files, and creates a searchable index. What's alarming to many is that Google Desktop Search can resurrect Web pages that were not meant to be viewed again, including online banking and brokerage transactions, as well as Web-based e-mail received and sent on the computer by previous users.

"This is basically a spying program," says Richard Smith, an independent privacy and security consultant. "Like a gun, it is extremely useful and potentially very dangerous."

Google, however, says the application does not pose security or privacy risks. Google Desktop Search can be configured not to index specific domains or secure Web pages, says Marissa Mayer, Google's director of consumer Web products. This would prevent it from storing copies of the secure pages used by financial sites, or from storing Web pages from a domain such as "," she says.

The beta version of the program can only be installed by one Windows user profile. That means if a second person logs onto the same computer using a different user profile they cannot access or install Google Desktop Search, says Mayer. She says that Google Desktop Search is not intended to be used on computers that are shared with more than one person.

Web pages resurrected

In informal tests, Google Desktop Search was able to bypass user names and passwords that secure Web-based e-mail programs and allow users to view personal messages sent and received using the Web-based e-mail services of America Online, Microsoft's Hotmail, and Yahoo Mail.

Because of this, Smith and other privacy experts say the beta version of Google Desktop Search presents a security threat for insecure and shared computers running the software in the workplace and in public settings like Internet cafes.

By searching for "compose" and "inbox" using Google Desktop Search, you're able to view Web pages that the application had indexed. The query results can't be accessed directly, but Google Desktop Search creates and stores its own cached versions of search results on your PC. Cached versions of sent and received e-mail from services like Yahoo, Hotmail, and AOL can easily be viewed.

Google Desktop Search also allows you to view cached versions of Web pages from online banks and brokerages.

Security or privacy threat?

Privacy experts at the Electronic Frontier Foundation say Google Desktop Search is not a privacy threat, rather a threat to computer security. "If you lose control of your computer, someone could quickly pry into password protected information," says Kevin Bankston, an attorney with the group.

Google Desktop Search could actually be a privacy boon by allowing people to save Web pages and e-mail locally on their PCs instead of relying on third-party Web-based services, Bankston says.

The application does pose a security risk at the workplace, says Ken Dunham, a security expert at iDefense. "This is another vector for someone to access sensitive data on someone else's machine," Dunham says.

He says the Desktop Search tool could give the keys to your PC's front door to the wrong people. "There are plenty of ways to get at personal information on a PC. The question is how easy do you want to make it?"

Dunham says that Google Desktop Search represents a "low" but potentially dangerous security threat for companies.

Bruce Schneier, a security expert with Counterpane Internet Security, says if you use a public computer terminal -- with or without Google Desktop Search -- you should assume that everything you type can be read.

Schneier and others don't recommend installing Google Desktop Search on work or school computers you can't control. They recommend disabling the part of Google Desktop Search that creates copies of secure Web pages and preventing the software from storing the pages of Web-based e-mail accounts you want to keep private.

"This is an amazing product," Smith says. "But it can also be a real privacy threat to unsophisticated computer users."

Join the newsletter!


Sign up to gain exclusive access to email subscriptions, event invitations, competitions, giveaways, and much more.

Membership is free, and your security and privacy remain protected. View our privacy policy before signing up.

Error: Please check your email address.
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Tom Spring

PC World
Show Comments

Cool Tech

Toys for Boys

Family Friendly

Stocking Stuffer

SmartLens - Clip on Phone Camera Lens Set of 3

Learn more >

Christmas Gift Guide

Click for more ›

Brand Post

Most Popular Reviews

Latest Articles


PCW Evaluation Team

Aysha Strobbe

Microsoft Office 365/HP Spectre x360

Microsoft Office continues to make a student’s life that little bit easier by offering reliable, easy to use, time-saving functionality, while continuing to develop new features that further enhance what is already a formidable collection of applications

Michael Hargreaves

Microsoft Office 365/Dell XPS 15 2-in-1

I’d recommend a Dell XPS 15 2-in-1 and the new Windows 10 to anyone who needs to get serious work done (before you kick back on your couch with your favourite Netflix show.)

Maryellen Rose George

Brother PT-P750W

It’s useful for office tasks as well as pragmatic labelling of equipment and storage – just don’t get too excited and label everything in sight!

Cathy Giles

Brother MFC-L8900CDW

The Brother MFC-L8900CDW is an absolute stand out. I struggle to fault it.

Luke Hill


I need power and lots of it. As a Front End Web developer anything less just won’t cut it which is why the MSI GT75 is an outstanding laptop for me. It’s a sleek and futuristic looking, high quality, beast that has a touch of sci-fi flare about it.

Emily Tyson

MSI GE63 Raider

If you’re looking to invest in your next work horse laptop for work or home use, you can’t go wrong with the MSI GE63.

Featured Content

Product Launch Showcase

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?