Analyst: Beware of the Google Gadgets
One fun thing about the interactive world of Web 2.0 is the online applications you can take advantage of, such as Google Gadgets.
Google describes Gadgets as "miniature objects that offer cool and dynamic content that can be placed on any page on the Web. They're free and available for you to add to any Webpage that you own," including personalized Google properties such as iGoogle and Google Desktop.
However, one person's cool functionality can be another's security vulnerability.
"The architecture right now is highly insecure," said Tom Stracener, a senior analyst with the application security company Cenzic Inc. of Santa Clara, Calif. "It is not clear to me that Google Gadgets have been adopted in a widespread fashion," but they are being used by people without a lot of security awareness or expertise. "The current environment is high-risk," Stracener added.
Read the whole story here.