Torsten2217 / google-plus-platform

Automatically exported from code.google.com/p/google-plus-platform
0 stars 0 forks source link

In search option Hangout shows username which are not in my friend list. #910

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
How does the product behavior differ from your expectations?
-> Hangout have just replaced with the UI in gmail. Its good, but in search 
box, when I type some random name it is showing me options of the same 
username, Even that person is not in my list. 

Describe, step-by-step, how to reproduce this issue.
1) Login to Gmail with you user ID
2) In Google chat(New hangouts are there), search some name which is not in 
your list, It shows all the person with that name. and you can ping him.

Also,
If with username, image is there you can copy Image url by right click on the 
image, "Copy Image URL", And paste it in new tab you see the image. 
If you remove "s81-c-k-no/" from the URL, full image will be shown.

Describe the impact of this bug
-> This is serious I am able to see all the persons who are not in my friend 
circle, Able to search in Google+ it is different. but in GMail it should not 
be done. 
-> Also with the images user should not  be able to copy the image url.
-> If I take the url and just copy in some system with any google session, 
Still I am able to see the image. I believe this will violate privacy.

When did this bug start happening?
-> It started happening when Hangout changes today in morning, means UI change.

Describe any workarounds you have found
->As a normal layman user, I should be able to search Chat suggestion only from 
my friend list, not from random person on Google+, Also I am able ping these 
users for chat. 

Original issue reported on code.google.com by manishgu...@gmail.com on 15 Jul 2014 at 12:05

GoogleCodeExporter commented 9 years ago
 If I take the url and just copy in some system without any google session, 
Still I am able to see the image.

Original comment by manishgu...@gmail.com on 15 Jul 2014 at 12:07