StevenWhiting.com

A place for info I've learnt in IT & stuff. (I get a little kick back from affiliate ads & links, just so you are aware)

Browsing Posts tagged Google

I did these guides as there appeared to be very little info on GAM on YouTube. Which is odd considering its really the only option to fully manage Gsuite. Bit like PowerShell in Office 365.

This is from last year, they may have updated stuff. Also they don’t appear to update their online documentation on new updates

https://github.com/jay0lee/GAM

 

Long title just to say this

https://www.google.co.uk/search?q=

Is a Google search query. Just put what you want to search for at the end of the =

https://www.google.co.uk/search?q=cats

Or

https://www.google.co.uk/search?q=cats+dogs

I just found it interesting that was all. Seems to get rid of all the other crap that is in the URL that Google adds. I don’t know what the other crap does. I wondered if they were IDs but appears to do it in an incognito window as well when no account is signed in.

 

Google Drive for Desktop Flaws


Putting this out there anyway, whether anyone will see this post is another thing. This is a tiny site 🙂

The number one flaw of Google Drive for Desktops when using G Suite (so in a business environment) is the lack of auditing. It states this on their support page.

https://support.google.com/a/answer/4579696?hl=en

  • Downloads from the following sources are not logged:
    Google Drive for Mac/PC sync client downloads

This essentially means someone in your organisation can upload loads of documents to their Google drive making sure they keep them as Office documents or other types (just not G Suite file types). They then install Google Drive for Desktop on their personal PC/Mac and connect their work account. This will then sync all their files to their personal desktop with no auditing. They can then copy all these files from their Drive share to elsewhere on their PC/Mac. They’ve now stolen lots of your data with no audit trace.

If you natively just use G Suites docs, this becomes harder for them to do, because they first need to download all the documents from a browser which automatically will convert them to Office. This means if they then try to open the Office docs, they can. If they leave them as G Suite documents they won’t be able to view them. This is because they will open in a browser and they will need to login with their work account to view them.

Worst still, if the person has left and their account disable. When they disconnect their work account on their personal PC/Mac, it doesn’t then wipe the files already sync to their Google Drive folder on the desktop. It keeps them available for them to actively copy or read.

I see that as a large flaw but then I’m no security expert, I just have an interest in it.

 

Bad Behavior has blocked 82 access attempts in the last 7 days.