Google's Backdoor Access System into Gmail Accounts

#1

Post by powertower » Mon, May 02, 2011, 2:12 PM UTC

Google's Backdoor Access System into Gmail Accounts
schneier.com

Re: Google's Backdoor Access System into Gmail Accounts

#2

Post by obtino » Mon, May 02, 2011, 2:50 PM UTC

You guys realise that this essay was published on January 23, 2010 right? I'm sure it's been posted here before.

Re: Google's Backdoor Access System into Gmail Accounts

#3

Post by edanm » Mon, May 02, 2011, 2:52 PM UTC

I'm guessing this is in response to this thread:

http://news.ycombinator.com/item?id=2505857

Re: Google's Backdoor Access System into Gmail Accounts

#4

Post by powertower » Mon, May 02, 2011, 3:24 PM UTC

obtino wrote: post #2

You guys realise that this essay was published on January 23, 2010 right? I'm sure it's been posted here before.

Doing a quick search I can't find any posts linking to this essay except in 1 comment.

Re: Google's Backdoor Access System into Gmail Accounts

#5

Post by pragmatic » Mon, May 02, 2011, 3:51 PM UTC

Could anyone recommend a hosted email service that does not allow spying on users?

Alternatively I wonder what Bruce Schneier recommends? Do you have to host your own email server?

Re: Google's Backdoor Access System into Gmail Accounts

#6

Post by pragmatic » Mon, May 02, 2011, 3:51 PM UTC

pragmatic wrote: post #5

Could anyone recommend a hosted email service that does not allow spying on users? Alternatively I wonder what Bruce Schneier recommends? Do you have to host your own email server?

I currently use gmail. The only features I "need" are tags and searching.

Re: Google's Backdoor Access System into Gmail Accounts

#7

Post by jamespo » Mon, May 02, 2011, 3:54 PM UTC

Some more detail in that article would be nice.

Re: Google's Backdoor Access System into Gmail Accounts

#8

Post by theDoug » Mon, May 02, 2011, 3:54 PM UTC

pragmatic wrote: post #5

Could anyone recommend a hosted email service that does not allow spying on users? Alternatively I wonder what Bruce Schneier recommends? Do you have to host your own email server?

It's not necessarily 'spying.' Many large service providers have such as system for logging in as a user to aid in troubleshooting. Yahoo's is known as AMT for example and lets customer service (or anyone with high enough access clearance) 'be' that user, to see first hand the issues the customer might be dealing with.

For everyone who thinks they're an email pro, or never come across problems, there's thousands of users calling any support number they can to try to understand why their junk mail folder won't empty.

Re: Google's Backdoor Access System into Gmail Accounts

#9

Post by hvs » Mon, May 02, 2011, 4:03 PM UTC

pragmatic wrote: post #5

Could anyone recommend a hosted email service that does not allow spying on users? Alternatively I wonder what Bruce Schneier recommends? Do you have to host your own email server?

Under U.S. laws, providers are often required to give information to the government if they have a warrant. If you want (more) security, host it yourself.

Re: Google's Backdoor Access System into Gmail Accounts

#10

Post by semanticist » Mon, May 02, 2011, 4:06 PM UTC

pragmatic wrote: post #5

Could anyone recommend a hosted email service that does not allow spying on users? Alternatively I wonder what Bruce Schneier recommends? Do you have to host your own email server?

If you use a hosted service, then unless it is specifically set up to prevent it (as with tarsnap for backups, which requires key management on the end-user's part), the people hosting it will have access to your data.

If that's a major issue, then your only recourse is to host it yourself.

Running a mail server isn't terribly hard, but it does mean that when the server dies you're on the hook for fixing it. If you're not a sysadmin, then the pragmatic choice is probably to accept that Google doesn't care about the details of your email and will only be spying on you in aggregate to determine what adverts to display.