"Hackers target Google Gadgets"

LAS VEGAS (AP) - One of the biggest problems with the so-called Web 2.0 movement has been its encouragement of oversharing - which often means underestimating security risks. Adding doodads of varying quality to a home page can add a lot of pizazz, but can also be fraught with danger, since they can open a door for hackers.

It's a threat even for the biggest Web companies, including Google Inc. (GOOG) (GOOG), whose "gadgets" - little programs like calendars or daily photo feeds that users can implant onto their personalized Google home pages - are increasingly juicy targets for hackers, two security researchers said Wednesday....

The issue is that users building their own customized applications, and distributing them through Google, might have evil intentions and try to exploit those programs once they're installed on users' pages. Many users are inclined to inherently trust what they download from Google....

Malicious gadgets - if a user were to download one of them - could be used in a variety of other attacks, including one where one gadget steals information from another, a valuable attack against gadgets that store personal user information, Hansen and Stracener said.

"How do you know it's a legitimate gadget?" Hansen asked. "Because someone uploaded it? There's no moderation, there's no way to guarantee it won't turn bad."