• On TechRepublic: Your resume will be tossed if. . .
September 18, 2009 3:01 PM PDT

Google Apps bug: You've got (my) mail

by Elinor Mills
  • Font size
  • Print
  • 23 comments

As a result of a bug in a Google Apps e-mail migration tool, some students at Brown University found other students' e-mail in their in-box over the weekend as Google was moving their e-mail from Exchange to Gmail, Google confirmed on Friday.

The problem affected a "handful" of organizations that use Google Apps, a spokesman said. He declined to specify how many were affected or how many individual users were affected.

Brown University newspaper the Brown Daily Herald reported that e-mail for 22 students was misdirected starting on Friday, that the university notified Google about it on Saturday, and it was fixed on Tuesday.

However, the Google spokesman said the company found out about the problem on Monday, disabled the affected accounts within hours, and then restored the accounts within a day.

"A very small number of Google Apps domains using the IMAP migration tool last weekend encountered a bug that caused a handful of their users' mail to be migrated to the wrong accounts," the spokesman said in a statement. "We quickly identified and fixed the issue, which affected less than 0.002% of users, and worked with the organizations to restore the affected accounts to their original state. We have extensive safeguards in place to ensure that users' mail is safe, and we're confident this was an isolated incident."

Donald Tom, director of IT support services at the school, complained to the newspaper that the school was not notified before the affected e-mail accounts were suspended. However, he did praise Google for moving swiftly to fix the problem.

Asked to respond to that criticism, the Google spokesman said: "In this case we made the judgment call that the safest and most expedient course of action for the affected users was to suspend affected accounts as soon as possible. In our conversations with our customers, they've appreciated our prompt actions and have been satisfied with the outcome."

Elinor Mills covers Internet security and privacy. She joined CNET News in 2005 after working as a foreign correspondent for Reuters in Portugal and writing for The Industry Standard, the IDG News Service, and the Associated Press. E-mail Elinor.
Recent posts from InSecurity Complex
Hacker 'Mudge' gets DARPA job
26 Windows, Office holes patched in 13 bulletins
Microsoft, Google split over browser bug bounty
Verizon temporarily blocks some 4chan sites
PCI compliance: What it is and why it matters (Q&A)
BlackBerry has spyware risk too, researcher says
DOJ not pleased with latest Google Book agreement
Microsoft to patch 26 holes in Windows, Office
Add a Comment (Log in or register) (23 Comments)
  • prev
  • next
by El_Gringo_Guapo September 18, 2009 3:24 PM PDT
My university uses Gmail....it's glitchy, occasionally will get username/password failures on IMAP.
Reply to this comment
by cvaldes1831 September 18, 2009 3:30 PM PDT
Yet another strike against cloud computing.<br /><br />Simply isn't ready for primetime... Maybe in five or ten years.
Reply to this comment
by Random_Walk September 19, 2009 8:05 AM PDT
...to be honest, I can see some sysadmin goof and do the same thing locally. The impact would be smaller, but it would still be just as likely. <br /><br />As someone who is the primary email admin @ work (yes, I'm apparently a masochist), you always triple-check everything you do on your setup - even if you built it yourself. Problem is, sometimes sh*t happens. <br /><br />I will grant you this, though - especially with email, even if it's the user's fault (e.g. they accidentally set their own client-side Outlook spam filter to hose up their entire mailbox), you're going to eat the blame for it, especially if that user is a VP or CxO. <br /><br />In-house, no big deal - they know you're a human being too, and can eventually admit that they screwed up if it truly is their fault. OTOH, with outsourced or cloud-computing, the user suddenly thinks that the provider is simply not human, and will proceed to abuse them just like any other vendor. If the CS department is adept enough (and tough enough), no problem. IF not, they will collapse at even the slightest goof.
by PhaseDMA September 19, 2009 9:35 AM PDT
I agree with Random_Walk. This isn't really a "cloud computing" issue. It's a administration problem. Anyways. This exact problem could have happened a long time before the term "cloud computing" was even a thought in some one's head.<br /><br />I mean isn't email cloud computing by it's very nature?
by gggg sssss September 21, 2009 6:04 PM PDT
@Random_Walk if its local at least yu can tell where teh leak pops up. If its google and your business plan pops up in China, or you WMD plans pop up at DHS what do you do?
by screamapillar September 22, 2009 8:54 PM PDT
@gggg ssss wouldn't DHS already have a copy of your wmd plans if you're using gmail? :D [giggle]
by 42istheanswer September 18, 2009 3:38 PM PDT
We're talking about switching to GApps next year at our U. Hopefully all this is worked out by then. Regardless, it's a better way to go than M$ Exchange which is what we use now.
Reply to this comment
by rsucre September 18, 2009 4:39 PM PDT
Software will always have bugs. It does not matter if it runs on the cloud or on your own infrastructure. This thing that happened is serious, don't want to minimize that, but has nothing to do with the fact that it is running on Google's Cloud. Cloud makes a lot of sense and is very viable today.
by bonesbautista September 18, 2009 4:27 PM PDT
I'm on Premier Apps, so is one of my clients - two of her messages to a couple of government agencies and emailed to them showed up in my inbox two days ago. We thought we were losing it, but this explains everything now... Google's slipping up, and it's starting to **** me off.
Reply to this comment
by gggg sssss September 21, 2009 6:05 PM PDT
is she on the side getting earmartks or the other side
by kalabawpiper September 18, 2009 5:17 PM PDT
If you read the blogs and tech support complaints, Google has MANY known issues (bugs) with their various apps, to include mail service; that never seem to get resolved. It is as if they do a big "splash" release of a new feature or app, then stop supporting it when the first complaints start rolling in (i.e. calendar sync, mail sync, contacts, etc.). Unless it could have legal ramifications, they don't seem to care. No way for a company with a stock price of just under $500 / share to act.
Reply to this comment
by slickuser September 18, 2009 6:13 PM PDT
All their crap is skunkworks. what you pay (free) is what you get
by cvaldes1831 September 18, 2009 8:01 PM PDT
@slickuser:<br /><br />The problem here is that Google is trying to build their cloud computing business by selling Google Apps at $50 per year per user.<br /><br />These service snafus not only hurt the users, they greatly deteriorate public perception of Google's ability to run enterprise-grade cloud services. The damage is cumulative because the people whom Google is trying to sell cloud computing (IT managers, etc.) remember previous outages.
by Vegaman_Dan September 18, 2009 9:14 PM PDT
is Google offering identity theft protection/credit monitoring services for all those involved? Considering the number of confirmation emails you may get or if you have password change requests in your mailbox saved away, there's a lot of liability involved here. <br /> <br />Those affected could possibly have a case against their university for legal action if they so choose.
Reply to this comment
by edentifier2 September 19, 2009 6:07 AM PDT
I notice Google Apps offers a 99.9% e-mail uptime guarantee. Doesn't say anything about whose mail you'll actually be able to access... it will be interesting to see what happens when Los Angeles tries to move 30,000 workers over to the platform, complete with sensitive healthcare, legal and financial data. <br /> <br />Scary. <br /> <br />Frankly I would like to know which companies are using / thinking of using Google Apps that are currently holding my personal details... so I can remove them.
Reply to this comment
by mcka0471 September 19, 2009 6:07 AM PDT
Ouch!!!... I guess its nice to know that even Google makes mistakes :)
Reply to this comment
by make_or_break September 21, 2009 5:51 AM PDT
Really? You're only NOW finding that out?
by tenc21 September 19, 2009 8:28 PM PDT
IMHO it's neither a cloud problem nor administration problem...it's a Brown Univ problem. Did this happen at Harvard, Yale or even Princeton?
Reply to this comment
by ropo153 September 23, 2009 8:06 AM PDT
Google admitted to the mistake you snobby idiot!
by musicfumez September 21, 2009 8:42 AM PDT
Another Cloud Problem! by google....unbelieveable<br /><br />Signature: &lt;a href="http://www.musicfumez.com/"target="_blank"&gt;Ultimate Entertainment Website&lt;/a&gt;
Reply to this comment
by Internet-Lawyer September 21, 2009 1:20 PM PDT
These type of email issues are likely to come up once in a while. Except of the obvious email privacy issues, let's not make too big a deal our of it. &lt;a href="http://www.web20lawyer.com/page0/page46/email-law.html"&gt;Email Spam Lawyer&lt;/a&gt;.
Reply to this comment
by gggg sssss September 21, 2009 6:06 PM PDT
ROTFLMAO <br /> <br />Fear the cloud
Reply to this comment
by JCPayne September 30, 2009 10:16 AM PDT
I get other people's mail all the time in GMail. If you try to call Google to speak to their techs they tell you "We're not able to transfer the call because our techs aren't setup to speak to the public." I once even got someone's Army Interview addressed to a completely different email address in the email headers but luckily the email was marked as "unclassified" within. DON'T use Gmail for anything very personal that you wouldn't mind other people possibly getting.
Reply to this comment
(23 Comments)
  • prev
  • next
advertisement

Google's social side aims for some Buzz

Facebook and Twitter are the darlings of the social-media world, not Google--which hopes to change that with Buzz, betting it can organize your online social life.

Watching the birth of a gaming start-up

Stewart Butterfield and his friends are back at it with a new company. CNET's Daniel Terdiman was given exclusive, behind-the-scenes access as they built it from scratch.

About InSecurity Complex

Elinor Mills became fascinated with hacker culture when she was sent to Las Vegas to cover DefCon in 1995. Since then, script kiddies have given way to cyber criminals targeting bank passwords, and privacy risks are everywhere, from Google to Facebook and the iPhone. InSecurity Complex keeps tabs on the flaws, the foibles, and the fixes.

Add this feed to your online news reader

InSecurity Complex topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right