[nsp-sec] Google Docs phishing forms with TTL exceeded

Chris Morrow morrowc at ops-netman.net
Wed Feb 20 09:30:55 EST 2013


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



On 02/20/2013 09:25 AM, CERT-UT - Peter wrote:
> Chris,
> 
> Chris Morrow wrote on 20-02-2013 15:22:
> 
>>>> sent these for destruction.
>> 
>>> I have heard (from rumors) that organizations having a Google
>>> Apps account can also report a removal request at the Apps
>>> support team to get things removed. I hear it sometimes takes
>>> not more than 1 hour to fix things. You seem to have to click
>>> the link on the document first before you go to the Apps team.
>> 
>> not sure... but I imagine that the domain administrator might
>> have this power? These are not (near as I can tell) 
>> google-aps-for-your-domains user forms though :(
> 
> I expect a domain administrator to be able to block access to a
> doc without the help of the Apps team. We are in the process of
> starting up Google Apps (for Education) so I'll check with our
> Google Apps contacts.
> 

ah! hrm... I can give it a whirl on my personal apps-for-domains
account, I'm really not sure I've never tried myself (since I only use
the afyd account to collect spams)
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)
Comment: Using GnuPG with undefined - http://www.enigmail.net/

iD8DBQFRJN4fr6swUqhDs2sRArhtAJ9ztd6KxisCm5p7kCvw9NSZQ/lUXQCfZVX+
Qb/9I1OSXXBCIdvwWPXcJVo=
=NovU
-----END PGP SIGNATURE-----



More information about the nsp-security mailing list