PaulDotCom mailing list archives

quick idea for sending spam through google calendar


From: robin at digininja.org (Robin Wood)
Date: Sun, 11 Apr 2010 18:35:47 +0100

I've just noticed that if you share a google calendar with someone
then it is automatically added to their set of calendars without any
kind of confirmation, the user is sent an email after the fact to say
that it has been done.

This gives me a couple of ideas for sending spam:

Create a calendar full of spam messages and share it with loads of
people - very obvious but gets the message out in the same way as the
current send everyone spam blast.

Create a calendar with just a couple of entries that lead to spam but
are made up to look like legit entries, users are bound to be curious
if an entry appears "Lunch with Rachel" and a link.

Don't know if you can disable this feature but I know that I haven't
done anything to deliberately enable it so it would probably work
against most gmail users.

Robin


Current thread: