The Buzz on Google Buzz: ‘Huge Privacy Flaw’

Google Buzz (Image from zdnet.com.)

Google Buzz (Image from zdnet.com.)

Nicholas Carlson at Silicon Alley Insider writes about the issue I was just discussing on Twitter: what he calls the “huge privacy flaw” in Google Buzz.  Luckily, he’s explained it so I don’t have to.  He writes:

When you first go into Google Buzz, it automatically sets you up with followers and people to follow.

A Google spokesperson tells us these people are chosen based on whom the users emails and chats with most using Gmail.

That’s fine.

The problem is that — by default — the people you follow and the people that follow you are made public to anyone who looks at your profile.

In other words, before you change any settings in Google Buzz, someone could go into your profile and see the people you email and chat with most.

Yikes.

If you don’t get why, Carlson explains:

The whole point is: Google should just ask users: “Do you want to follow these people we’ve suggested you follow based on the fact that you email and chat with them? Warning: This will expose to the public who you email and chat with most.”  Google should not let users proceed to using Buzz until they click, “Yes, publish these lists.”

In my profession — where anonymous sourcing is a crucial tool — the implications of this flaw are terrifying.

Hopefully, he’s right and Google will quickly fix this design flaw.

Otherwise, expect to see some state attorney general’s office quickly open an investigation and fire off a letter to Google asking them to explain this decision.  The U.S. Code section cited, I’d suspect, will be this.

Popularity: 7% [?]

About the Author

Chris Geidner is the award-winning senior political editor at D.C.'s Metro Weekly and has written for The Atlantic Online, The American Prospect, Advocate.com, Salon and other publications, as well as at his blog, Law Dork. In 2011, he received the Excellence in News Writing Award from the National Lesbian and Gay Journalists Association for his coverage of "Don't Ask, Don't Tell" repeal. Prior to moving to D.C. in 2009, he served as an attorney on the senior staff at the Ohio Attorney General's Office and had earlier worked for a leading Columbus law firm. An extended biography can be found here, and you can follow him on Twitter.