Alert: Google Drive/Docs Security Issue
ITS Service Desk Notice Reference Number: HD0455816
Google Drive (formerly Google Docs) users should not use @otago.ac.nz domain email addresses to access shared documents as this is a security issue. A problem arises when a Google Drive document is shared with an @otago.ac.nz user, and the recipient is prompted to login to Google Apps with their @otago.ac.nz account which is not valid. It is suspected that the cause is a bug in Google Drive where it mistakenly thinks a recipient has a Google Apps for Otago account, and thus creates a shared link that requires a Google Apps login. The University of Otago does not use Google Apps for Otago.
The Information Security Office has disabled the ability for Google Apps for Otago users to receive Google Drive documents from outside the otago.ac.nz domain. Hopefully, this will prevent the bug condition, as Google will then either generate a non-Google Apps link, or prompt the sender to specify a non-@otago account for the recipient.
If you have access to Google Apps for Otago, use a non-@otago.ac.nz email address such as a Gmail account to use Google Drive shared documents.
Please contact the Information Security Office if you need more information about this situation.