What You Should Know About Gmail and Google Calendar Malicious Spam Invites

Carsten Koall, Getty Images
Carsten Koall, Getty Images

With an estimated 1.5 billion users, Google’s Gmail service is so widely used that any misuse of its features can have far-reaching consequences. As Forbes contributor Davey Winder points out, one feature in particular--Google's Calendar function--could conceivably lead to spam invites.

Google Calendar, which is accessible via Gmail, notifies users of scheduled appointments that are either manually inserted or created from an email invitation. The problem, Winder explains, is in Calendar allowing anyone to schedule a meeting with a user without email notification and Gmail allowing those events to be automatically added to Calendar. Because Gmail users assume the invites must be legitimate, they might click on a pop-up notification about a fraudulent event, or a link within a fraudulent event, that leads to a malicious attack site. In extreme cases, the links can lead to portals where bank or credit card information is solicited.

In an example used by Black Hills Information Security, which discovered the flaw, a Calendar user might receive a notice about an “all-hands” meeting starting in a few minutes along with a link to information that will be discussed at the meeting. Feeling a sense of urgency, a user may not examine the reminder too closely, click the link, and be transferred to a site with malicious software.

Though the vulnerability has been known and publicized for years, Google is only recently taking steps to address it, announcing via a help forum post that they’re working to reduce the potential for spam or malicious links to be passed along through the service.

Until then, it’s best for users to be more diligent when it comes to interacting with the Calendar function. Under the Settings > Event Configuration settings, “Automatically add invitations” should be disabled; the option for showing invitations users have responded to should be enabled. It’s also advisable never to follow any link from a Calendar email from an address or entity you don’t recognize.

[h/t Forbes]

Missing the Days of Clippy? There’s an App That Will Bring Him Back

The Science Elf, YouTube
The Science Elf, YouTube

Some Microsoft Office users might still brace for the appearance of a certain nosy, wide-eyed paper clip whenever they type Dear at the top of a fresh Word document. After all, Clippy was the anthropomorphic pet we never asked for, yet tolerated through several formative years of computer technology.

Though Clippy—short for Clippit—may have been on the receiving end of an industry-wide eye roll in the late 1990s, it’s hard to ignore how much he seems like an early, distant ancestor to applications like Alexa and Siri, upon whom society has developed a pretty significant reliance. Whether you think about the injustice against Clippy every day or you’re just a normal person who likes any excuse to indulge in ‘90s nostalgia, we have news for you: You can rescue him from the void and host him on your very own Mac desktop.

According to Lifehacker, the app was created by a developer named Devran “Cosmo” Uenal, who debuted the program on Github earlier this month. This rather chilled-out Clippy won’t burst into your Word document and offer unsolicited advice on how to write letters, but he’ll still entertain you with animated performances if you right-click on him and choose “Animate!”

As you can see in Uenal’s Twitter video, he might don a pair of oversized headphones and mime a music jam sessions, or he might transform into a googly-eyed, heavy-eyebrowed checkmark.

To download the paperclip pal for yourself, scroll down to the “First start” section on the Github page and click “Download Clippy for macOS,” which should trigger an automatic download. Click on that installation file, and then follow the rest of the directions in the “First start” section to open Clippy on your desktop. From there, the fun is endless.

And, if you’re hungry for more history about the world’s most hated virtual assistant, you can read more about his tragic life here.

[h/t Lifehacker]

Wish You Could ‘Shazam’ a Piece of Art? With Magnus, You Can

Manuel-F-O/iStock via Getty Images
Manuel-F-O/iStock via Getty Images

While museum artworks are often accompanied by tidy little placards that tell you the basics—title, artist, year, medium, dimensions, etc.—that’s not always the standard for art galleries and fairs. For people who don’t love tracking down a staff member every time they’d like to know more about a particular work, there’s Magnus, a Shazam-like app that lets you snap a photo of an artwork and will then tell you the title, artist, last price, and more.

The New York Times reports that Magnus has a primarily crowdsourced database of more than 10 million art images. Though the idea of creating Shazam for art seems fairly straightforward, the execution has been relatively complex, partially because of the sheer quantity of art in the world. As founder Magnus Resch explained to The New York Times, “There is a lot more art in the world than there are songs.”

Structural diversity in art adds another challenge to the process: it’s difficult for image recognition technology to register 3D objects like sculptures, however famous they may be. Resch also has to dodge copyright violations; he maintains that the Digital Millennium Copyright Act applies to his app, since the photos are taken and shared by users, but he still has had to remove some content. All things considered, Magnus’s approximate match rate of 70 percent is pretty impressive.

Since the process of buying and selling art often includes negotiation and prices can fluctuate drastically, Magnus gives potential purchasers the background information they need to at least decide whether they’re interested in pursuing a particular piece. Just like browsing around a boutique where prices aren’t included on the items, a lack of transparency can be a deterrent for new customers.

Such was the case for Jelena Cohen, a Colgate-Palmolive brand manager who bought her first photograph with the help of Magnus. “I used to go to these art fairs, and I felt embarrassed or shy, because nothing’s listed,” she told The New York Times. “I loved that the app could scan a piece and give you the exact history of it, when it was last sold, and the price it was sold for. That helped me negotiate.” Through Magnus, you can also keep track of artworks you’ve scanned in your digital collection, search for artworks by artist, and share images to social media.

One thing Magnus can’t do, however, is tell you whether an artwork is authentic or not. The truth is that sometimes even art experts have trouble doing that, as evidenced by the long history of notorious art forgeries.

[h/t The New York Times]

SECTIONS

arrow
LIVE SMARTER