Why ProtonMail is more secure than Gmail

Re:Why ProtonMail is more secure than Gmail by londons_explore on Monday October 23, 2017 @11:58AM (#15534131)

Around 100 people have root @ Google. They get a tshirt with it on.

With months of effort researching tripwires and auditing systems, any of them could read your mail.

There's a pretty good chance they'd get caught by some auditing or alerting system they were unaware of though. Many of those systems are kept secret from employees for obvious reasons.

Any two employees collude to much more easily read your mail. There's probably ~1000 people in that position (not only the gmail team, but anyone who writes any kind of library code used by any of the databases, datastores, or application servers). They would leave audit records though, although they might go unnoticed.

[ Parent | on HN ]

Re:Why ProtonMail is more secure than Gmail by technofiend on Monday October 23, 2017 @12:38PM (#15534488)

That's cool in that it's such a small number. Netflix shared how they do ephemeral access by publishing bless *[1]. It would be cool to see how Google does it as well. Googling for the usual terms doesn't return anything.

[1]https://github.com/Netflix/bless

[ Parent | on HN ]

Re:Why ProtonMail is more secure than Gmail by DINKDINK on Monday October 23, 2017 @12:37PM (#15534481)

>100 people have root @ Google. They get a tshirt with it on.

A convenient way to put a target on your back. What benefit does this have to their security? Accountability?

[ Parent | on HN ]

Re:Why ProtonMail is more secure than Gmail by md_ on Monday October 23, 2017 @01:14PM (#15534806)

The t-shirts are a bit of jokey swag, not an access control mechanism. ;)

[ Parent | on HN ]

Re:Why ProtonMail is more secure than Gmail by DINKDINK on Monday October 23, 2017 @07:04PM (#15537664)

Yes, it’s a “hey everyone this person has the keys to the kingdom, target them” indicator.

[ Parent | on HN ]

Re:Why ProtonMail is more secure than Gmail by singron on Monday October 23, 2017 @07:46PM (#15537933)

It's likely that reading Gmail data and other sensitive actions require significantly less privilege than some Google-wide "root".

[ Parent | on HN ]

Re:Why ProtonMail is more secure than Gmail by londons_explore on Tuesday October 24, 2017 @05:08AM (#15540240)

Access controls are actually fairly locked down. I would guess the access control list for Gmail data is only ~10 people. If any of them were to make use of their access permissions, it would automatically trigger a review of their actions.

[ Parent | on HN ]