Excerpt from:  FAS Talk
.
October 15, 2009

Google Wave Security Gotcha!

The Google Wave UI makes it really, really easy to accidentally publish information to the wrong people.

Google WaveI've been using Google Wave seriously for a few weeks and I really like it.  But, right now anyway, its a very scary place to do anything important.

Wave is real-time.  Instant messaging (IM) seems downright sluggish by comparison while e-mail seems positively glacial.  Wave is a communication and collaboration power tool.

But wave is in its infancy.  Doing real, mission critical work in wave is like driving a fast car or carrying a loaded pistol before safety belts or trigger locks were invented.

One of the ways you shoot yourself in the foot with wave is you can invite the wrong participant into a wave.  Very easily.

Suppose you are collaborating with a peer via wave on an negotiation strategy for a potential technology acquisition.  You're weighing the pros and cons of various negotiation tactics and how the other party might react to each.  Once you're settling in on a strategy you think will work, you decide to invite your CFO into the wave to get her take on the overall plan.

But...

By unhappy coincidence, the other party's lead negotiator's name is alphabetically close to your CFO's and you accidentally double click his name in wave's Add participants dialog box.  Bang!  Gaping hole right through the middle of your foot.  Your wave appears in his wave inbox.  No confirmation prompt; no undo; no recovery.

I'm sure this is something that Google will fix.  And there will be other wave clients with even better UIs.  But for now, there are no safety belts or trigger locks.

Bottom line...

I love Google Wave.  I think it is an important nascent communication paradigm and underlying protocol.  But everything about it is so new that you should expect hiccups.  If you like being on the bleeding edge, I recommend that you give it a try, keep an open mind, and be very careful (even slightly paranoid) every time you see the Add participants dialog box.

Comments
.

RE: Google Wave Security Gotcha!

I appreciate the last paragraph, the bottom line section.  It made me OK with everything above it...everything that is centered around USER error and NOT a system error.

I think though to many people are writing little bits like this and not including the fact that Gwave is barely an alpha product and may be wholly different when it enters the beta stage or even RTM.

People who don't put two and two together are going to think Gwave is lacking because you aren't pointing out the painfully obvious development stage it resides in currently and I don't think that is fair to Google!

.
.

RE: Google Wave Security Gotcha!

@Inacurate
I completely agree the Gotcha I point out is an artifact of wave's infancy.  My intent was not to knock Google in any way--I very much like wave (and made that point in the very first sentence).  But I did intend to point out the fact that it is very easy (currently) to shoot yourself in the foot.  Sure, it's technically a case of pilot error if you do, but that won't make it hurt any less.
.

Syndication OptionsRSS (Rich Site Summary) Feed Atom Feed OPML (Outline Processor Language) Feed MYST-ML (MyST Markup Language) Content Feed MS-Office Smart Tag Subscription