Live data from Hacker News

Gmail confidential mode

gsuiteupdates.googleblog.com

151–160 of 206 posts

Re: Gmail confidential mode

#151
post #19

Earlier quoted context omitted.

The Airbnb app prevents screenshots on certain pages on the OS level on Android, I'm sure the Gmail app will do the same.

> The Airbnb app prevents screenshots on certain pages on the OS level on Android it is creepily dystopian that this sort of behavior is even possible

Ticketmaster also does that. It's incredibly shitty that they disable functionality on your phone.

Re: Gmail confidential mode

#152
post #151

Earlier quoted context omitted.

> The Airbnb app prevents screenshots on certain pages on the OS level on Android it is creepily dystopian that this sort of behavior is even possible

Ticketmaster also does that. It's incredibly shitty that they disable functionality on your phone.

The problem is that the operating system gives this power to the app developers and not to you. The shit is on the side of the android developers, not on the app developers, which are simply using an API available to them.

Re: Gmail confidential mode

#153

I feel that many of these pseudo-secure, proprietary enhancements to email create a false sense of security for non-tech-savvy users. Given the smoke-and-mirrors presentation of this as a way to "secure your email^tm" and the plethora of recent info leaks, i am sure some poor c-level exec will get caught inadvertently sharing something with an external recipient thinking that it will disappear in a few days, but then…

If the upshot of the class is anything other than we don't yet know how to make software secure or private, it's a drama class.

Re: Gmail confidential mode

#154

I feel that many of these pseudo-secure, proprietary enhancements to email create a false sense of security for non-tech-savvy users. Given the smoke-and-mirrors presentation of this as a way to "secure your email^tm" and the plethora of recent info leaks, i am sure some poor c-level exec will get caught inadvertently sharing something with an external recipient thinking that it will disappear in a few days, but then…

> In my utopia world, i'd love to see basics of information privacy and personal security be taught in schools

Yes! This should be required, beginning in primary school and extended into high school.

Concepts like authentication, encryption, man-in-the-middle attack, why authentication without encryption isn't very useful for communication, etc — this is not "technical" (I hate this word; it is used as an excuse not to think). It should be taught as part of basic education.

Re: Gmail confidential mode

#155
post #131

Earlier quoted context omitted.

How are they supposed to do that on the protocol level?

Protonmail allows you to add PGP key. Not sure if the user just sees 'garbage' data inside the email but it's entirely possible to send E2EE email already, just encrypt the contents of the message and send that across. If the person has the key, they can decrypt it.

Do you really want to hand over your private PGP key to 3rd-party company? I never ever won't do that. If I will use PGP key for web email service, it is only when the service provider gives a way to communicate with my local machine so that the email text is SIGNED IN MY MACHINE and send it back to the email provider, then send to the recipients. For encryption, it can be done with public key of the recipients.

Re: Gmail confidential mode

#157
post #2

> removing options for recipients to forward, copy, print, and download Oh please... Everybody can do a screenshot nowadays, and even Google itself integrated OCR into its Screenshot tool at Android a few years ago. What a waste of time to make the life of people harder who must use this "security" feature!

Or just take a photo of the screen with their iPhone!

Re: Gmail confidential mode

#158
If anyone is curious how it works with external accounts, I just tested it:

1) Mail arrives (subject intact) with text like "John Doe has sent you an email via Gmail confidential mode" and a "View Email" link

2) The link takes you to a "To view this email, you must first confirm your identity. A one-time passcode will be sent to (your email)" page.

3) Entering the separately-emailed passcode lets you see the email body in-browser. Selecting text is disabled in the body (so no copy-paste), trying to print the page blanks out the body area -- I'm sure you could bypass either with a bit of JS wizardry. Printscreen/screenshot work as expected.

Re: Gmail confidential mode

#159

I feel that many of these pseudo-secure, proprietary enhancements to email create a false sense of security for non-tech-savvy users. Given the smoke-and-mirrors presentation of this as a way to "secure your email^tm" and the plethora of recent info leaks, i am sure some poor c-level exec will get caught inadvertently sharing something with an external recipient thinking that it will disappear in a few days, but then…

It's not "pseudo", it is a tool to reduce risks of accidental leaks, and to enforce discipline. Used in a right context it increases security. However, I agree that it's proprietary, and it would be better to have such things in RFC.

Re: Gmail confidential mode

#160

I feel that many of these pseudo-secure, proprietary enhancements to email create a false sense of security for non-tech-savvy users. Given the smoke-and-mirrors presentation of this as a way to "secure your email^tm" and the plethora of recent info leaks, i am sure some poor c-level exec will get caught inadvertently sharing something with an external recipient thinking that it will disappear in a few days, but then…

Huh? Can't print this email? Let me forward to my non-secure other address.

Huh, message is going to expire? Better make a screenshot that syncs who knows where.

If they were serious, they'd create a mode that mirrors Protonmail, where they can't even read your stuff. And make it easy to use PGP.

As suggested below/above, the fact that our company Office365 Android env stops me from copy pasting text to other apps does one thing: It makes me forward certain mails to my home address.

Post reply on HN