Google Calendar bug could allow users to accidentally invite anyone to a private event

Google Calendar

Less of a security issue than it is a social awkward one, but a new bug discovered in Google’s Calendar service is making headlines this afternoon. Here’s what has everyone up in arms. As discovered by developer Terence Eden, when creating a new Calendar event, it’s possible to enter someone’s email address into the title, at which point they will receive an invite to join that event — regardless if the event is marked private.

While the odds of something like this happening in the real-world aren’t very likely, one scenario has a woman reminding herself to email her boss about a raise increase. You can only imagine the unconformable situation that could arise after her boss accepts (or rather, declines) the event. Less savory individuals would also be able to spam someone else’s calendar by taking advantage of this loophole.

According to The Verge, Google is already working on a fix so don’t go losing any sleep over it.

Continue reading:

  • Phaz0n

    Is this female’s name Paris Chavez?

  • Nick Mantzoros

    So that’s why so many people showed up to my birthday. And I thought I was popular :-/

  • Splaktar

    Sounds like a feature that is working as intended to me.

  • Cary6677

    мʏ ʀօօмαт­­­­­­℮­­­­­­’ѕ ѕт­­­­­­℮­­­­­­ք-αυɴт мαĸ­­­­­­℮­­­­­­ѕ $86 ­­­­­­℮­­­­­­ʋ­­­­­­℮­­­­­­ʀʏ нօυʀ օɴ тн­­­­­­℮­­­­­­ ιɴт­­­­­­℮­­­­­­ʀɴ­­­­­­℮­­­­­­т. ѕн­­­­­­℮­­­­­­ нαѕ в­­­­­­℮­­­­­­­­­­­­℮­­­­­­ɴ օυт օғ աօʀĸ ғօʀ ғιʋ­­­­­­℮­­­­­­ мօɴтнѕ вυт ʟαѕт мօɴтн н­­­­­­℮­­­­­­ʀ ιɴƈօм­­­­­­℮­­­­­­ աαѕ $21742 ʝυѕт աօʀĸιɴɢ օɴ тн­­­­­­℮­­­­­­ ιɴт­­­­­­℮­­­­­­ʀɴ­­­­­­℮­­­­­­т ғօʀ α ғ­­­­­­℮­­­­­­ա нօυʀѕ. ƈн­­­­­­℮­­­­­­ƈĸ օυт ʏօυʀ υʀʟ fox800&#46com

  • steveb944

    I think it’s a pretty good feature. I don’t use it but it can be useful. They should throw it in the options.

  • squiddy20

    And how often does one put the email address of another in the Event Name/What (mobile and desktop, respectively) sections? The example demonstrates the “issue” quite well, but most people in the exact same situation would put “Email Joe Black about the mysterious subject” because Joe Black would more than likely be listed in the Contacts with email address. And if he/she isn’t, they soon would be. Besides, the better alternative would be to fill out the To and Subject sections of an email, save it as a draft, and come back to it later.
    In my opinion, this isn’t a bug.

  • Jason Farrell

    I’ve never invited anyone to a “calendar event” in the first place. I still handle that “out of band”