Does Google desktop search pose risks?

If you use shared or public computers, you have a new privacy risk to consider: Google Desktop Search.

Announced last week and currently available in a beta version, Google Desktop Search allows you to scour your hard drive for lost or forgotten documents. But it just may be too good at what it does, according to privacy and security experts, who say it poses risks for users who don't understand its power.

Once installed, Google Desktop Search scours a computer for Microsoft Office files, AOL IM chat sessions, cached Web pages, and Outlook and Outlook Express e-mail files, and creates a searchable index. What's alarming to many is that Google Desktop Search can resurrect Web pages that were not meant to be viewed again, including online banking and brokerage transactions, as well as Web-based e-mail received and sent on the computer by previous users.

"This is basically a spying program," says Richard Smith, an independent privacy and security consultant. "Like a gun, it is extremely useful and potentially very dangerous."

Google, however, says the application does not pose security or privacy risks. Google Desktop Search can be configured not to index specific domains or secure Web pages, says Marissa Mayer, Google's director of consumer Web products. This would prevent it from storing copies of the secure pages used by financial sites, or from storing Web pages from a domain such as "," she says.

The beta version of the program can only be installed by one Windows user profile. That means if a second person logs onto the same computer using a different user profile they cannot access or install Google Desktop Search, says Mayer. She says that Google Desktop Search is not intended to be used on computers that are shared with more than one person.

Web pages resurrected

In informal tests, Google Desktop Search was able to bypass user names and passwords that secure Web-based e-mail programs and allow users to view personal messages sent and received using the Web-based e-mail services of America Online, Microsoft's Hotmail, and Yahoo Mail.

Because of this, Smith and other privacy experts say the beta version of Google Desktop Search presents a security threat for insecure and shared computers running the software in the workplace and in public settings like Internet cafes.

By searching for "compose" and "inbox" using Google Desktop Search, you're able to view Web pages that the application had indexed. The query results can't be accessed directly, but Google Desktop Search creates and stores its own cached versions of search results on your PC. Cached versions of sent and received e-mail from services like Yahoo, Hotmail, and AOL can easily be viewed.

Google Desktop Search also allows you to view cached versions of Web pages from online banks and brokerages.

Security or privacy threat?

Privacy experts at the Electronic Frontier Foundation say Google Desktop Search is not a privacy threat, rather a threat to computer security. "If you lose control of your computer, someone could quickly pry into password protected information," says Kevin Bankston, an attorney with the group.

Google Desktop Search could actually be a privacy boon by allowing people to save Web pages and e-mail locally on their PCs instead of relying on third-party Web-based services, Bankston says.

The application does pose a security risk at the workplace, says Ken Dunham, a security expert at iDefense. "This is another vector for someone to access sensitive data on someone else's machine," Dunham says.

He says the Desktop Search tool could give the keys to your PC's front door to the wrong people. "There are plenty of ways to get at personal information on a PC. The question is how easy do you want to make it?"

Dunham says that Google Desktop Search represents a "low" but potentially dangerous security threat for companies.

Bruce Schneier, a security expert with Counterpane Internet Security, says if you use a public computer terminal -- with or without Google Desktop Search -- you should assume that everything you type can be read.

Schneier and others don't recommend installing Google Desktop Search on work or school computers you can't control. They recommend disabling the part of Google Desktop Search that creates copies of secure Web pages and preventing the software from storing the pages of Web-based e-mail accounts you want to keep private.

"This is an amazing product," Smith says. "But it can also be a real privacy threat to unsophisticated computer users."

Join the newsletter!

Error: Please check your email address.
Rocket to Success - Your 10 Tips for Smarter ERP System Selection
Keep up with the latest tech news, reviews and previews by subscribing to the Good Gear Guide newsletter.

Tom Spring

PC World
Show Comments

Brand Post

Most Popular Reviews

Latest Articles


PCW Evaluation Team

Andrew Teoh

Brother MFC-L9570CDW Multifunction Printer

Touch screen visibility and operation was great and easy to navigate. Each menu and sub-menu was in an understandable order and category

Louise Coady

Brother MFC-L9570CDW Multifunction Printer

The printer was convenient, produced clear and vibrant images and was very easy to use

Edwina Hargreaves

WD My Cloud Home

I would recommend this device for families and small businesses who want one safe place to store all their important digital content and a way to easily share it with friends, family, business partners, or customers.

Walid Mikhael

Brother QL-820NWB Professional Label Printer

It’s easy to set up, it’s compact and quiet when printing and to top if off, the print quality is excellent. This is hands down the best printer I’ve used for printing labels.

Ben Ramsden

Sharp PN-40TC1 Huddle Board

Brainstorming, innovation, problem solving, and negotiation have all become much more productive and valuable if people can easily collaborate in real time with minimal friction.

Sarah Ieroianni

Brother QL-820NWB Professional Label Printer

The print quality also does not disappoint, it’s clear, bold, doesn’t smudge and the text is perfectly sized.

Featured Content

Product Launch Showcase

Latest Jobs

Don’t have an account? Sign up here

Don't have an account? Sign up now

Forgot password?