LWN: Comments on "The security benefits of using Gmail"

The security benefits of using Gmail

hugoroy — Sat, 27 Jun 2015 20:23:19 +0000

> Had he run a private email server, he might have had a system that could be more effectively hardened against technical attacks, but when the DOJ court order was served (either to him or to his hosting provider), he would not have been able to challenge it.

I don't see why he would not have been able to challenge it. He would have been more able to challenge it, than in the situation where the email provider receives a gag order! Indeed: how can you challenge something that you can't point at?

At least, if the DoJ order to get email data goes directly to you, there's no usefulness for a gag order. And you can challenge that request immediately, without relying on the benevolence of Google.

Had the same situation happen for anyone less known than Jake Appelbaum, I'm not sure that we could say Google would have acted the same way.

Sure, lawyers can be expensive. But lawyers can also work pro bono for cases like these. And at least, in such cases, the lawyers have your interest in mind first, not Google's.

The security benefits of using Gmail

jani — Sat, 27 Jun 2015 07:47:53 +0000

> He noted that, since he now lives in
> Germany, any further pursuit of the
> investigation will be more difficult for
> the US court system to conceal.

Anyone know why?

Also, he seems to be a US citizen. Does Google (claim they) respect the privacy of non-US citizens non-residents as well?

The security benefits of using Gmail

meskio — Fri, 26 Jun 2015 13:30:53 +0000

> > using email means you've already chosen the wrong tool for
> > a job that requires actual security
> The alternative being? e-mail is still the best federated communications platform we have.

I guess Appelbaum is thinking on pond: https://pond.imperialviolet.org/

The security benefits of using Gmail

robbe — Fri, 26 Jun 2015 10:56:56 +0000

> using email means you've already chosen the wrong tool for
> a job that requires actual security
The alternative being? e-mail is still the best federated communications platform we have.

> Had he run a private email server, he might have had a
> system that could be more effectively hardened against
> technical attacks, but when the DOJ court order was served
> (either to him or to his hosting provider), he would not have
> been able to challenge it.
Very true. But in my own hosting, I can choose if and how much I log. The DoJ can't well expect to get logs that don't exist.

Plus it's much more likely that the suspect gets wind of the issue, so a government concerned with its image may refrain from asking at all.

The security benefits of using Gmail

mbanck — Thu, 25 Jun 2015 20:04:04 +0000

Somebody already did that for this story:

https://storify.com/bbhorne/jacob-appelbaum-s-legal-discl...

The security benefits of using Gmail

rsidd — Thu, 25 Jun 2015 14:19:04 +0000

Thanks! Will do.

The security benefits of using Gmail

jake — Thu, 25 Jun 2015 13:19:23 +0000

> I know about the subscriber link but hesitate to share it on social media...

We have not found any real abuse of the subscriber links, some of which have definitely been posted to social media in the past. So, if you are so inclined, feel free to do so.

The article will, of course, be open to all in a week's time.

jake

The security benefits of using Gmail

smitty_one_each — Thu, 25 Jun 2015 12:32:32 +0000

You can use http://storify.com to compile a series of social media posts, including Twitter, for a coherent read.

The security benefits of using Gmail

rsidd — Thu, 25 Jun 2015 07:57:35 +0000

This is one article which many people not otherwise interested in LWN may enjoy reading. Would you consider making it freely viewable? (I know about the subscriber link but hesitate to share it on social media...)