Terence Eden is a developer who has discovered a privacy flaw in Google Calendar. He found that Calendar will automatically invite anyone whose email is entered in the title of an entry, even if the user makes that entry in their private calendar and does not plan on inviting anyone else. Invitations are sent without notifying the user. The recipient does not receive an email notification, however a “meeting reminder” pops up, which might cause some awkward situations even if it doesn’t have major security implications. For example, if a user creates an entry in their private calendar that reads “email adam@example.com and ask for a loan,” Mr. Adam will receive an invitation and will therefore know that he’s going to be requested for a loan.
Google Calendar Privacy Flaw Discovered original content from Ubergizmo.