Doesn't the gadget, and the page it redirects to, violate the google Terms
of Serivce?
I'm not sure whether the person who added said gadget is violating any ToS,
although if they also own said gadget, I'd be surprised if they weren't.

While it may not be possible to remove the gadget from playback, removing it
from the gmodules webserver should stop the (ex-)gadget from resolving.

In the mean time, I'd suggest using noscript to disallow certain actions by
any gmodules.com pages.

 - Stephen

On Thu, Feb 11, 2010 at 10:08 AM, Austin Chau <[email protected]> wrote:

> thanks for bringing this to our attention.  We have filed this
> internally and I have give that issue a knock to give it some
> priority, as soon as we hear back we will update this thread.  Thanks!
>
> Austin
>
> On Feb 10, 8:03 am, Bart Thate <[email protected]> wrote:
> > Hello wavers and more hello Google Team,
> >
> > Today a gadget was inserted into a public wave of mine, which directed
> > me on joining the wave to the following page:
> >
> > http://hosting.gmodules.com/ig/gadgets/file/100726510508187623906/wav...
> >
> > this page is a phishing login page of google wave which upon
> > registration logs stuff in a spreadsheet. The effect is that i cannot
> > enter the wave as it instantly directs me to the html page, so i
> > cannot even remove the thing ;]
> >
> > Obviously we need some stricter level of security in waves, now i wish
> > i had something like +v in waves, so people can add txt but not insert
> > gadgets etc.
> >
> > The wave is at:
> >
> > https://wave.google.com/wave/#restored:wave:googlewave.com!w%252BRvJR.<https://wave.google.com/wave/#restored:wave:googlewave.com%21w%252BRvJR.>
> ..
> >
> > Greetings,
> >
> > Bart
>
> --
> You received this message because you are subscribed to the Google Groups
> "Google Wave API" group.
> To post to this group, send email to [email protected].
> To unsubscribe from this group, send email to
> [email protected]<google-wave-api%[email protected]>
> .
> For more options, visit this group at
> http://groups.google.com/group/google-wave-api?hl=en.
>
>

-- 
You received this message because you are subscribed to the Google Groups 
"Google Wave API" group.
To post to this group, send email to [email protected].
To unsubscribe from this group, send email to 
[email protected].
For more options, visit this group at 
http://groups.google.com/group/google-wave-api?hl=en.

Reply via email to