Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Gmail confidential mode is not secure or private

protonmail.com

Post reply on HN
Print view View original

51–60 of 226 posts

Re: Gmail confidential mode is not secure or private

#51

Post by mulmen »

dewey wrote: post #30

> It can still be accessed by Google and potentially exposed to governments or hackers. The article makes the classic mistake of assuming everyone has the full security apparatus of a country after them. This feature is obviously not built as an alternative to Signal or for the Snowdens of this world. These probably know better than using unencrypted email already. For the average user it's an improvement of the curr…

So you reference Snowden then pretend dragnet surveillance doesn't exist?

If you are on the internet the NSA is spying on you and everyone else.

This is not an improvement because it makes guarantees that simply aren't true. These compromises are made to further Google's bottom line, not protect users. Don't pretend this is some kind of incremental improvement. It's a marketing gimmick.

Re: Gmail confidential mode is not secure or private

#52

Post by jvolkman »

wibble10 wrote: post #41
lloydde wrote: post #28

Earlier quoted context omitted.

You’re welcome. I found it fascinating at the time of the change, and still do, that email is sacred, but all other activity is open for manipation-based-advertising.

If they don’t scrape your email how is this page generated then? https://myaccount.google.com/purchases

Nobody said the emails aren't scanned; they're just not used as context for ads. Obviously they're scanned, otherwise spam filtering wouldn't be possible.

Re: Gmail confidential mode is not secure or private

#53

Post by OrgNet »

dewey wrote: post #30

> It can still be accessed by Google and potentially exposed to governments or hackers. The article makes the classic mistake of assuming everyone has the full security apparatus of a country after them. This feature is obviously not built as an alternative to Signal or for the Snowdens of this world. These probably know better than using unencrypted email already. For the average user it's an improvement of the curr…

> The article makes the classic mistake of assuming everyone has the full security apparatus of a country after them.

Why build something half ass when you can do it right? I'll tell you why... it's because of those secret letters from the NSA... (the NSA = the real leader in our Government)

Re: Gmail confidential mode is not secure or private

#54

Post by sigmar »

dheera wrote: post #3

"Options for recipients to forward, copy, print, or download this email's contents will be disabled." I simply don't understand how they think they can get away with this foolishness. I can forward, copy, print, or download ANYTHING that passes over my ethernet cables. Your silly UI will ultimately never stop me from wiresharking my own cables in my own home and doing whatever the hell I want with any bits of informa…

>Note: Although confidential mode helps prevent the recipients from accidentally sharing your email, it doesn't prevent recipients from taking screenshots or photos of your messages or attachments. Recipients who have malicious programs on their computer may still be able to copy or download your messages or attachments.

If you click the "learn more" in gmail it says that ^. Gmail seems pretty upfront about what "confidentiality mode" does.

Re: Gmail confidential mode is not secure or private

#56

Post by C1sc0cat »

derefr wrote: post #19
dheera wrote: post #3

"Options for recipients to forward, copy, print, or download this email's contents will be disabled." I simply don't understand how they think they can get away with this foolishness. I can forward, copy, print, or download ANYTHING that passes over my ethernet cables. Your silly UI will ultimately never stop me from wiresharking my own cables in my own home and doing whatever the hell I want with any bits of informa…

Consider for a moment: a company or school set up as an Enterprise Mobile Device Management provider, handing everyone out ChromeOS devices, setting up their GSuite domain so that nobody can connect to their GSuite GMail accounts except through the ChromeOS device (or an equivalent MDMed mobile device), and setting up an automatic, un-disable-able VPN on those devices for accessing Google domains. I think that’s the…

I would have thought that IBM and other corporates would be keen to have things Like Confirmed Delivery , Non-repudiation and all the other nice things that x.400 (88) and X.500 promised.

Re: Gmail confidential mode is not secure or private

#57

Post by TeMPOraL »

sigmar wrote: post #54
dheera wrote: post #3

"Options for recipients to forward, copy, print, or download this email's contents will be disabled." I simply don't understand how they think they can get away with this foolishness. I can forward, copy, print, or download ANYTHING that passes over my ethernet cables. Your silly UI will ultimately never stop me from wiresharking my own cables in my own home and doing whatever the hell I want with any bits of informa…

>Note: Although confidential mode helps prevent the recipients from accidentally sharing your email, it doesn't prevent recipients from taking screenshots or photos of your messages or attachments. Recipients who have malicious programs on their computer may still be able to copy or download your messages or attachments. If you click the "learn more" in gmail it says that ^. Gmail seems pretty upfront about what "con…

> Recipients who have malicious programs on their computer may still be able to copy or download your messages or attachments.

I guess me exercising my right to do whatever I want with my bits on my computer is me having "malicious programs". What in the actual fsck.

Re: Gmail confidential mode is not secure or private

#58

Post by cookingrobot »

behringer wrote: post #47
lawfulcactus wrote: post #35

Earlier quoted context omitted.

It's worth mentioning that all these measures can be fairly trivially defeated by the analog loophole[1]. I suppose it's harder to prove authenticity in that case, however. https://en.wikipedia.org/wiki/Analog_loophole

But as a worker in a corporation, the chances that you would want an email so badly that you start breaking more corporate rules trying to get a copy of an email is very unlikely at least for common everyday work. This could be a useful feature when dealing with PHI, legal, HR, etc.

I know people who have taken photos of protected documents with their phones to send to their team, because IT couldn’t get their permissions working properly. It seems like it’s not worth the risk to break an obvious rule like that, but when you’re the manager the responsibility lands on you to get your team the info they need.

Re: Gmail confidential mode is not secure or private

#59

Post by [deleted] »

afandian wrote: post #45
lawfulcactus wrote: post #35

Earlier quoted context omitted.

It's worth mentioning that all these measures can be fairly trivially defeated by the analog loophole[1]. I suppose it's harder to prove authenticity in that case, however. https://en.wikipedia.org/wiki/Analog_loophole

Allow me to sell your organisation some VR goggles with iris-reading DRM protection. Your browser won't display on any other screen. And Google Services won't work in any other browser.

[deleted]

Re: Gmail confidential mode is not secure or private

#60

Post by ac29 »

kerng wrote: post #36
lern_too_spel wrote: post #10

This is a feature that Outlook already has and corporate users expect. It's for making forwarding sensitive emails or any of their content require intent instead of being accidental.

Yeah, GSuites it's pretty bad for enterprise use because it's missing such, in my opinion, mandatory features.

This feature is coming to Gsuite next Tuesday.
Post reply on HN