What You Should Know About Gmail and Google Calendar Malicious Spam Invites

Carsten Koall, Getty Images
Carsten Koall, Getty Images

With an estimated 1.5 billion users, Google’s Gmail service is so widely used that any misuse of its features can have far-reaching consequences. As Forbes contributor Davey Winder points out, one feature in particular--Google's Calendar function--could conceivably lead to spam invites.

Google Calendar, which is accessible via Gmail, notifies users of scheduled appointments that are either manually inserted or created from an email invitation. The problem, Winder explains, is in Calendar allowing anyone to schedule a meeting with a user without email notification and Gmail allowing those events to be automatically added to Calendar. Because Gmail users assume the invites must be legitimate, they might click on a pop-up notification about a fraudulent event, or a link within a fraudulent event, that leads to a malicious attack site. In extreme cases, the links can lead to portals where bank or credit card information is solicited.

In an example used by Black Hills Information Security, which discovered the flaw, a Calendar user might receive a notice about an “all-hands” meeting starting in a few minutes along with a link to information that will be discussed at the meeting. Feeling a sense of urgency, a user may not examine the reminder too closely, click the link, and be transferred to a site with malicious software.

Though the vulnerability has been known and publicized for years, Google is only recently taking steps to address it, announcing via a help forum post that they’re working to reduce the potential for spam or malicious links to be passed along through the service.

Until then, it’s best for users to be more diligent when it comes to interacting with the Calendar function. Under the Settings > Event Configuration settings, “Automatically add invitations” should be disabled; the option for showing invitations users have responded to should be enabled. It’s also advisable never to follow any link from a Calendar email from an address or entity you don’t recognize.

[h/t Forbes]

10 Products for a Better Night's Sleep

Amazon/Comfort Spaces
Amazon/Comfort Spaces

Getting a full eight hours of sleep can be tough these days. If you’re having trouble catching enough Zzzs, consider giving these highly rated and recommended products a try.

1. Everlasting Comfort Pure Memory Foam Knee Pillow; $25

Everlasting Comfort Knee Pillow
Everlasting Comfort/Amazon

For side sleepers, keeping the spine, hips, and legs aligned is key to a good night’s rest—and a pain-free morning after. Everlasting Comfort’s memory foam knee pillow is ergonomically designed to fit between the knees or thighs to ensure proper alignment. One simple but game-changing feature is the removable strap, which you can fasten around one leg; this keeps the pillow in place even as you roll at night, meaning you don’t have to wake up to adjust it (or pick it up from your floor). Reviewers call the pillow “life-changing” and “the best knee pillow I’ve found.” Plus, it comes with two pairs of ear plugs.

Buy it: Amazon

2. Letsfit White Noise Machine; $21

Letsfit White Noise Machine
Letsfit/Amazon

White noise machines: They’re not just for babies! This Letsfit model—which is rated 4.7 out of five with nearly 3500 reviews—has 14 potential sleep soundtracks, including three white noise tracks, to better block out everything from sirens to birds that chirp enthusiastically at dawn (although there’s also a birds track, if that’s your thing). It also has a timer function and a night light.

Buy it: Amazon

3. ECLIPSE Blackout Curtains; $16

Eclipse Black Out Curtains
Eclipse/Amazon

According to the National Sleep Foundation, too much light in a room when you’re trying to snooze is a recipe for sleep disaster. These understated polyester curtains from ECLIPSE block 99 percent of light and reduce noise—plus, they’ll help you save on energy costs. "Our neighbor leaves their backyard light on all night with what I can only guess is the same kind of bulb they use on a train headlight. It shines across their yard, through ours, straight at our bedroom window," one Amazon reviewer who purchased the curtains in black wrote. "These drapes block the light completely."

Buy it: Amazon

4. JALL Wake Up Light Sunrise Alarm Clock; $38

JALL Wake Up Light Sunrise Alarm Clock
JALL/Amazon

Being jarred awake by a blaring alarm clock can set the wrong mood for the rest of your day. Wake up in a more pleasant way with this clock, which gradually lights up between 10 percent and 100 percent in the 30 minutes before your alarm. You can choose between seven different colors and several natural sounds as well as a regular alarm beep, but why would you ever use that? “Since getting this clock my sleep has been much better,” one reviewer reported. “I wake up not feeling tired but refreshed.”

Buy it: Amazon

5. Philips SmartSleep Wake-Up Light; $200

Philips SmartSleep Wake-Up Light
Philips/Amazon

If you’re looking for an alarm clock with even more features, Philips’s SmartSleep Wake-Up Light is smartphone-enabled and equipped with an AmbiTrack sensor, which tracks things like bedroom temperature, humidity, and light levels, then gives recommendations for how you can get a better night’s rest.

Buy it: Amazon

6. Slumber Cloud Stratus Sheet Set; $159

Stratus sheets from Slumber Cloud.
Slumber Cloud

Being too hot or too cold can kill a good night’s sleep. The Good Housekeeping Institute rated these sheets—which are made with Outlast fibers engineered by NASA—as 2020’s best temperature-regulating sheets.

Buy it: SlumberCloud

7. Comfort Space Coolmax Sheet Set; $29-$40

Comfort Spaces Coolmax Sheets
Comfort Spaces/Amazon

If $159 sheets are out of your price range, the GHI recommends these sheets from Comfort Spaces, which are made with moisture-wicking Coolmax microfiber. Depending on the size you need, they range in price from $29 to $40.

Buy it: Amazon

8. Coop Home Goods Eden Memory Foam Pillow; $80

Coop Eden Pillow
Coop Home Goods/Amazon

This pillow—which has a 4.5-star rating on Amazon—is filled with memory foam scraps and microfiber, and comes with an extra half-pound of fill so you can add, or subtract, the amount in the pillow for ultimate comfort. As a bonus, the pillows are hypoallergenic, mite-resistant, and washable.

Buy it: Amazon

9. Baloo Weighted Blanket; $149-$169

Baloo Weighted Blanket
Baloo/Amazon

Though the science is still out on weighted blankets, some people swear by them. Wirecutter named this Baloo blanket the best, not in small part because, unlike many weighted blankets, it’s machine-washable and -dryable. It’s currently available in 12-pound ($149) twin size and 20-pound ($169) queen size. It’s rated 4.7 out of five stars on Amazon, with one reviewer reporting that “when it's spread out over you it just feels like a comfy, snuggly hug for your whole body … I've found it super relaxing for falling asleep the last few nights, and it looks nice on the end of the bed, too.” 

Buy it: Amazon 

10. Philips Smartsleep Snoring Relief Band; $200

Philips SmartSleep Snoring Relief Band
Philips/Amazon

Few things can disturb your slumber—and that of the ones you love—like loudly sawing logs. Philips’s Smartsleep Snoring Relief Band is designed for people who snore when they’re sleeping on their backs, and according to the company, 86 percent of people who used the band reported reduced snoring after a month. The device wraps around the torso and is equipped with a sensor that delivers vibrations if it detects you moving to sleep on your back; those vibrations stop when you roll onto your side. The next day, you can see how many hours you spent in bed, how many of those hours you spent on your back, and your response rate to the vibrations. The sensor has an algorithm that notes your response rate and tweaks the intensity of vibrations based on that. “This device works exactly as advertised,” one Amazon reviewer wrote. “I’d say it’s perfect.”

Buy it: Amazon

This article contains affiliate links to products selected by our editors. Mental Floss may receive a commission for purchases made through these links.

New Virtual Tool Lets You Rickroll Your Next Zoom Meeting

YouTube
YouTube

Anyone who says the Rickroll is played out isn't thinking big enough. The classic internet prank—in which web users are tricked into watching the music video for "Never Gonna Give You Up" by Rick Astley—has been reimagined countless times in a variety of contexts. Now, Rickrolling has entered the Zoom era.

As Gizmodo reports, creative technologist Matt Reed has invented a genius tool that lets you Rickroll your coworkers. After receiving an invitation to a Zoom meeting you're not excited to attend, head to InviteRick.com and submit the invite link.

The tool is still in beta, and Reed has to initiate every Rickroll manually. That means Rick is only available to make surprise Zoom performances on weekdays between 10 a.m. and 4 p.m. EST. Once you've signed up for the service, you'll be added to a queue and updated on when to expect Rick to make his appearance. When the pop icon does eventually crash your Zoom, he'll stick around for approximately 15 seconds before making his exit. Hopefully that's enough time to completely derail the meeting.

InviteRick.com may only be around for a short while (Reed admits it likely violates Zoom's terms of service), so spread that '80s corniness while you still can. In the meantime, check out these epic Rickrolls from a simpler time in history.

[h/t Gizmodo]