21 votes

Google confirms it's letting third parties scan your Gmail

15 comments

  1. tomf
    Link
    Reuters has a better article on this. Basically, 'I gave permission for this thing to snoop on me, and now its snooping on me... and it's all your fault, Google!' There are plenty of handy...

    Reuters has a better article on this.

    Gmail users must give their consent to activate extensions, which can help them send emails on a time delay, get price-match rebates from retailers and remove unwanted mailing lists.

    Basically, 'I gave permission for this thing to snoop on me, and now its snooping on me... and it's all your fault, Google!'

    There are plenty of handy extensions for Gmail, but they all come at a cost to your privacy.

    23 votes
  2. cge
    Link
    While I am not particularly a fan of Gmail or Google at this point, this article seems as though it confusingly (or, perhaps, misleadingly) describes conflates separate practices and thus suggests...

    While I am not particularly a fan of Gmail or Google at this point, this article seems as though it confusingly (or, perhaps, misleadingly) describes conflates separate practices and thus suggests issues that aren't actually issues. There's a point about Google contracting with third parties, apparently, for some data processing, which would be a problem, but that's buried in the middle of the article, which is instead mostly about addons.

    If a user installs an add-on, from a third party, that either operates by that third party scanning their email, or creates revenue for the third party by scanning their email, it does not seem reasonable to suggest that Google is somehow nefariously allowing third parties to scan users' email. The user installed the add-on, not Google. With the exception of Google providing the marketplace directly, this is a bit like users installing, say, Incredimail on Windows, and then, finding out that their data is being misused, blaming Microsoft.

    Thus, one could see this piece as being about market regulation, and in that sense, one could view its implied calls for Google to regulate data protection for Gmail addons as either anti- or pro-Google, with the pro-Google side being that the call is essentially for Google to take on regulatory functions as a corporation rather than having the market regulated by the state. In the EU, for example, I think this entire issue is covered by GPDR: addons that are scanning data improperly and without informed consent would be in violation. The corporatist approach instead gives Google even more control over how users can use their own data.

    The other possibility, I suppose, is that the article is suggesting the permissions process for access is unclear, though it never actually says that. In looking at addons, I have always found it quite clear: there is a whole page with descriptions of what will be shared that one has to go through before access is granted, and it explicitly, if I recall, points out that all emails will be available in cases where they will be. Is this not the case?


    In another issue: while I'd like to move away from gsuite, and I would have no problem with my resulting email access, I'm not sure how I could, for example, move my mother away from it. Gmail's interface is just seen as the standard now for many people.

    18 votes
  3. [5]
    Comment deleted by author
    Link
    1. [4]
      NeoTheFox
      Link Parent
      Do it. Just do it, really. It's easy, interesting and very useful. I have my own server that hosts: my homepage my nextcloud (and I have space to my friends too) my VPN my experiments And I've got...

      Do it. Just do it, really. It's easy, interesting and very useful. I have my own server that hosts:

      • my homepage
      • my nextcloud (and I have space to my friends too)
      • my VPN
      • my experiments

      And I've got for virtually pennies, just recycled a very cheap HP Compaq workstation, they are cheap as hell to get and they make amazing servers. All you need is Debian Linux or OpenBSD, and brief online tutorials to get it all set up.

      3 votes
      1. [2]
        pseudolobster
        Link Parent
        Do you have any problems with your outgoing emails being spamfiltered? I recall last time I set up an email server it was a big problem getting especially google and microsoft to trust my domain.

        Do you have any problems with your outgoing emails being spamfiltered? I recall last time I set up an email server it was a big problem getting especially google and microsoft to trust my domain.

        2 votes
        1. NeoTheFox
          Link Parent
          If few people would add you to their adressbook or drop a first email to you this would stop happening, if you have a first level domain. If you are using duckdns or similar service then yeah,...

          If few people would add you to their adressbook or drop a first email to you this would stop happening, if you have a first level domain. If you are using duckdns or similar service then yeah, it's a struggle.

      2. [2]
        Comment deleted by author
        Link Parent
        1. NeoTheFox
          Link Parent
          There should be no bounce back, no matter how loaded your network is, unless you have a VERY bad router. If you are worried about it you can always set up a QoS on your router to leave, say 128k...

          There should be no bounce back, no matter how loaded your network is, unless you have a VERY bad router. If you are worried about it you can always set up a QoS on your router to leave, say 128k connection for your server. Never happens to me tho, I have 100MB/s, and my whole family may be streaming or downloading something, but the server is never down. Modern routers do load balancing pretty well.

  4. [4]
    neu
    Link
    I've been looking at alternatives to GMail for a few weeks now. I have heard how difficult it can be to get your own email server going. Does anyone have any suggestions for something privacy...

    I've been looking at alternatives to GMail for a few weeks now. I have heard how difficult it can be to get your own email server going. Does anyone have any suggestions for something privacy oriented? I get a lot of my bills by email and I don't want to risk not receiving them by self hosting.

    EDIT: I plan to begin setting up a cloud storage server from a desktop I have laying around (I'm planning on running Ubuntu on it), is self-hosting easier than I am making it out to be? Does anyone have any guides to recommend?

    2 votes
    1. [3]
      NeoTheFox
      Link Parent
      protonmail.com tutanota.com Both are free and easy-to-use. Also you can register, say, a yahoo email just for your bills, and set up forwarding to your email, so you would have a copy. Also...

      protonmail.com
      tutanota.com

      Both are free and easy-to-use. Also you can register, say, a yahoo email just for your bills, and set up forwarding to your email, so you would have a copy. Also setting up your own mail server is really easy if you can read a 10 minutes worth of text. For OpenBSD all you have to do is:

      • Install OpenBSD, you just have to answer questions as it installs it and then you are done
      • Install NextCloud via package manager and start using it
      7 votes
      1. [2]
        neu
        Link Parent
        I actually have a protonmail account. It's still new and haven't used it much, I just haven't made the decision to tie all of my online accounts to that address yet. I am currently looking into...

        I actually have a protonmail account. It's still new and haven't used it much, I just haven't made the decision to tie all of my online accounts to that address yet.

        I am currently looking into some guides to get a better idea of the process of self-hosting. I typically enjoy new learning experiences, but anytime I have troubleshot email issues in the past it was like troubleshooting printers. Do you find that it's easy to keep up with updates on your mail server? Or does it just update with a "apt-get update"?

        2 votes
        1. NeoTheFox
          Link Parent
          Sure, the Debian wiki is pretty straightforward about how to setup everything. And then if you want a web client NextCloud can do that.

          Sure, the Debian wiki is pretty straightforward about how to setup everything. And then if you want a web client NextCloud can do that.

          3 votes
  5. [5]
    trojanhorse
    Link
    I really need to accelerate my plan to get rid of Gmail. I really hate to get rid of it because I've had it since 2006 and because I have a period in it so I technically have two emails. I'm not...

    I really need to accelerate my plan to get rid of Gmail. I really hate to get rid of it because I've had it since 2006 and because I have a period in it so I technically have two emails. I'm not really using it for anything important anymore. I've moved 90% to protonmail with two custom domains, one domain being my primary email address. I need to just move all of my accounts over to it and disable my Gmail. I can't believe I've had it since 2006. When I got it you had to have an invite to get an account.

    1 vote
    1. [4]
      Deimos
      Link Parent
      You have a whole lot more than two, you can just add periods wherever you want and they'll all end up in the same inbox. So if your address is trojan.horse@gmail.com you can also use trojanhorse...

      I've had it since 2006 and because I have a period in it so I technically have two emails

      You have a whole lot more than two, you can just add periods wherever you want and they'll all end up in the same inbox. So if your address is trojan.horse@gmail.com you can also use trojanhorse or t.ro.jan.ho.rse or t.roj.anho.rs.e or any other arrangement, gmail just ignores all the periods.

      6 votes
      1. [3]
        trojanhorse
        Link Parent
        Learned something new. Thanks. I'll probably hold onto it for bogus stuff like free trials to keep that stuff separate.

        Learned something new. Thanks. I'll probably hold onto it for bogus stuff like free trials to keep that stuff separate.

        1. [2]
          Lynx
          Link Parent
          For something more easily associated with the site where it was used, there's also Subaddressing - with Gmail and a lot of others, user+something@example.com is the same as user@example.com.

          For something more easily associated with the site where it was used, there's also Subaddressing - with Gmail and a lot of others, user+something@example.com is the same as user@example.com.

          4 votes