Security Gaps in Search Engines

Theories and allegations are one thing – but it is functionality in practice that counts.

Suppose your documents have been indexed by Google Search Appliance. Make any search and  note, e.g., the seventh search result. Then, change the access right for this document such that your user account has no read access anymore to this specific document. Now submit the same search again and see what happens…