Hacker News new | ask | show | jobs
by SturgeonsLaw 2492 days ago
1) Sign in to https://calendar.google.com/ in the browser

2) Click the Settings Gearwheel then Settings

3) Click Event Settings and set "Automatically add invitations" to "No, only display invitations to which I have replied"

Edit: if you want to disable event auto-add from Gmail while you're at it, click Events from Gmail then untick "Automatically add events from Gmail to my calendar"
2 comments
buro9 2492 days ago
Note that this only solves it for you.

If you have fully shared your calendar (i.e. to a spouse / partner) then even though they are not displayed for you they are still displayed to your partner.

There remains no decent way to ensure no-one sees the spam.

link
haste410 2492 days ago
This is mentioned in the article along with a way for spammers to get around it.

"There is an option that states “No, only show invitations to which I have responded”. This prevents the first method of injecting events from working. However, BHIS found that it is possible to set the target’s response status to “Accepted” using the Google API. This effectively bypasses this security setting."

link