Gartner Group is out trying to stir up some controversy from a meaningless issue. eWeek explains:
A feature expected in the next version of Windows that will allow users to tag documents and other files with “metadata” could lead to embarrassing information disclosures if companies are not careful, according to research from Gartner Inc.
[…]
Gartner’s research note, “Plan to deal with metadata issues with Windows Vista,” published Wednesday, takes Microsoft to task for not designing security into the upcoming versions of Windows, code-named Vista, and Microsoft Office.
Those programs make it easy to attach keywords to documents, but they don’t make it clear that the keywords and other metadata can be viewed by anyone.
Sheesh, what planet have these guys been living on? Metadata issues have been around for years. (This long Knowledge Base article covers the nine-old Word 97.) Any company that hasn’t put policies and procedures in place to minimize the risk of sensitive data leaking out into the world just hasn’t been paying attention.
Gartner was trying to take advantage of a slow news week to try to manufacture a controversy where none should exist.
By the way, I read somewhere that Office 12 actually has some tools built in that allow you automatically scan document files for metadata, comments, deleted text, and other stray bits of data that can inadvertently reveal information you would prefer to leave private.
PC Magazine and PC World both got to write about these Office 12 features and even show screenshots. Unfortunately, I can’t do that because of an NDA agreement I signed. I wrote this a few weeks ago:
As I pointed out yesterday, the terms of the Office 12 confidentiality agreement prohibit me from discussing any aspect of the product. This information blackout applies to everyone except Microsoft employees, apparently.
And selected media outlets, too. Different rules apply to a handful of people and publications, most of them still in the dead-tree business.
Scoble agrees:
I’ll talk to the team about that. I think NDAs are often too restrictive and are ultimately counterproductive.
Hope they return your calls this week.
Update: Bruce Schneier had some interesting thoughts on the subject back in November.