News for hackers. Stuff that matters.
Re:Google Ends Forced Arbitration for Employees by defen on Thursday February 21, 2019 @05:44PM (#19221276)
> the right to surveillance on personal property

Wait, what? I don't think I've seen that before, what does this mean exactly?

Re:Google Ends Forced Arbitration for Employees by knopyPusher on Thursday February 21, 2019 @07:44PM (#19222093)
I work in Google as well, and I simply don't check my personal Gmail from work machines. They can monitor my work laptop as much as they want.

This is coming from a firefox-using privacy paranoid Googler.

I have no idea what this guy is talking about.

Re:Google Ends Forced Arbitration for Employees by NowThenGoodBad on Friday February 22, 2019 @07:47AM (#19224838)
It’s not just the programming companies that have clauses or practices about stuff like that, many companies in different industries do too.

It just blows me away how lazy or thoughtless most people are. It’s the company’s network or machine or both. The business done on there should be for work for them and nothing more. You breach ethical lines when you start doing personal stuff unless stated otherwise in your contract/agreement with them.

If I gave you my laptop to borrow for a day, you bet I’ll be making sure you didn’t do something funky to it. I’ll also be making sure you didn’t do something to get me on a government watch list. If there’s a reason to try to get statistical data from your usage, I might check that out too.

To me, it’s common sense, it’s not yours so respect it for the reason it was given to you to use. Period.

For your personal stuff: don’t trust it on their network or with their software. You exist to make them money regardless of whether you get paid directly for it. Assume 0 privacy on the clock and that your device might be compromised if used on their network, so just don’t do it.

Re:Google Ends Forced Arbitration for Employees by IWeldMelons on Friday February 22, 2019 @12:39PM (#19227237)
It does not seem to make sense. Google has access to each and any Gmail account, and it does not matter whether you login in from your home machine, or do this at work (on Google's premises).
Re:Google Ends Forced Arbitration for Employees by ionised on Friday February 22, 2019 @05:45AM (#19224381)
You're privacy paranoid but work at Google?
Re:Google Ends Forced Arbitration for Employees by moccachino on Friday February 22, 2019 @05:58AM (#19224421)
Keep your friends close...
Re:Google Ends Forced Arbitration for Employees by C1sc0cat on Friday February 22, 2019 @07:51AM (#19224859)
Hopefully they are working on the security team :-)
Re:Google Ends Forced Arbitration for Employees by ChuckMcM on Thursday February 21, 2019 @06:18PM (#19221582)
Well, I can't quote my copy as I'm under NDA from sharing it, however if you have a copy that you signed then carefully read the section about "equipment that you use to access your google work account".
Re:Google Ends Forced Arbitration for Employees by massivecali on Thursday February 21, 2019 @06:54PM (#19221819)
Isn't there something similar in all Terms when loading something like Outlook Exchange etc. onto your personal phone with your work email? You basically sign over all privacy and content for them to do as they please with no granularity.
Re:Google Ends Forced Arbitration for Employees by deogeo on Thursday February 21, 2019 @06:34PM (#19221685)
An NDA on the contract itself? Sounds shady as hell.
Re:Google Ends Forced Arbitration for Employees by jkaplowitz on Friday February 22, 2019 @10:08AM (#19225925)
Pretty common in general. I recently saw a lawyer provide a template independent contractor agreement which had such a provision in the boilerplate, entirely unrelated to Google or any other huge company.

I agree it's shady, but I suspect it's there so that they don't have to specifically negotiate to add it when a special-case deal is agreed to. (They may say they don't negotiate, but there are exceptions at any company.)

They can't seriously expect their standard form agreement to stay NDA-confidential when they've had 6 to 8 figures of people sign versions of it, regardless of what the agreement requires. If there has ever been litigation over Google's legalese - even a dispute over whether forced arbitration applies - the copy in the court record is probably either public or unsealable upon request to the court.

(I'm a former Google employee, didn't have any role related to employee contract language, not a lawyer, certainly not speaking for them.)

Re:Google Ends Forced Arbitration for Employees by Bartweiss on Friday February 22, 2019 @12:06PM (#19226930)
> I agree it's shady, but I suspect it's there so that they don't have to specifically negotiate to add it when a special-case deal is agreed to... They can't seriously expect their standard form agreement to stay NDA-confidential

Yep. Basically the same logic as companies with competitive salaries trying to keep wage info quiet, even in the age of Glassdoor. It's not that there's something to hide about the standard version, and it's not that the terms or even text will stay private. But it adds a hurdle to people comparing notes on exactly what they signed, and when somebody does get a special exemption, it stops them putting up a point-by-point guide for everyone else.

> They may say they don't negotiate, but there are exceptions at any company.

Presumably Google is big enough to have standards and make case-by-case decisions, but it's sort of horrifying how many smaller companies approach contracts as an exercise in seeing what they can get away with. Employment-prohibiting noncompetes and personal-time invention assignment clauses get casually tossed in, then pulled back out after no greater negotiation than bothering to ask.

It's not hard to see why contracts are under NDA when so many companies pretend their ridiculous terms are a standard form that everyone else signed.

Re:Google Ends Forced Arbitration for Employees by deogeo on Friday February 22, 2019 @02:40PM (#19228423)
> But it adds a hurdle to people comparing notes on exactly what they signed, and when somebody does get a special exemption, it stops them putting up a point-by-point guide for everyone else.

So to make it harder for labor to organize, basically.

Re:Google Ends Forced Arbitration for Employees by Bartweiss on Monday February 25, 2019 @11:44AM (#19246856)
More or less, yeah.

It's not as directly defensive as salary hiding, which can obviously help conceal everything from wage collusion to Ledbetter v. Goodyear style inequities. But it still stops labor from sharing information and helping to share in concessions.

I didn't include it above, but a related part is that layering on NDAs makes it harder for non-employees to get involved. If you post your whole contract online, a random employment lawyer might happen by and go "hey, you're getting screwed, 3.A.ii is non-standard and probably illegal". But if you restrict it to employee viewing and low-specificity discussions, you're less likely to have lawyers or activists get involved unprompted.

Re:Google Ends Forced Arbitration for Employees by deogeo on Friday February 22, 2019 @10:21AM (#19226046)
> Pretty common in general.

Even more worrisome.

Re:Google Ends Forced Arbitration for Employees by walshemj on Thursday February 21, 2019 @07:46PM (#19222106)
You mean the companies equipment - that's fairly normal I have worked for companies that recognised unions in the UK and that clause never raised any issues.

There where agreements about what sort of offence justified monitoring at work it had to be a serious offence for example.

Re:Google Ends Forced Arbitration for Employees by ChuckMcM on Thursday February 21, 2019 @07:59PM (#19222171)
Not sure why you had a down vote, but to be clear the contract I have makes no limitation on who "owns" the equipment. Nor does it limit how such verification might be done. And since, at the time, all Google employee services could be accessed through a browser to employee specific URLs, it could be pretty much anything.
Re:Google Ends Forced Arbitration for Employees by joshuamorton on Thursday February 21, 2019 @08:21PM (#19222290)
I feel like the corollary to this is that you're strongly encouraged to not access work stuff from a non Corp device.

I don't think I've ever logged in to my Corp account from any non Corp device other than my phone, which uses a work profile for exactly that reason.

Re:Google Ends Forced Arbitration for Employees by throwaway0220 on Thursday February 21, 2019 @08:47PM (#19222419)
(Disclaimer: Googler here)

+1. Google gives you a corp phone and computer (even multiple ones, if needed); why the heck you'd want to use your personal devices? Plus using a personal device is strongly discouraged.

Also, all the companies I've worked before had similar clauses, and would always push iOS or Android certificates into your phone, so they can remote wipe the device when you leave company.

Seems fairly standard thing to me: no company would want their confidential information lying around in a bunch of personal devices. Calling it "Personal surveillance" seems ridiculous.

Re:Google Ends Forced Arbitration for Employees by cmrdporcupine on Thursday February 21, 2019 @10:32PM (#19222884)
We are not supplied with a corp phone, they're only for people with a 'business need.' Been @ Google 7 years and never had one given to me other than holiday gift phones.

Now, some of the nooglers sitting near me seem to think they're entitled to one, so maybe the messaging has changed. but I just looked it up and the language is: "Full-time Googlers with a business need are eligible for one Google-paid mobile phone and SIM"

Many Googlers I know have Corp set up on their personal phone.

Re:Google Ends Forced Arbitration for Employees by morgante on Thursday February 21, 2019 @11:32PM (#19223151)
If you're using your personal phone to check work email, that strongly implies a business need. Basically all my coworkers have corp phones.
Re:Google Ends Forced Arbitration for Employees by oh_sigh on Friday February 22, 2019 @01:28AM (#19223563)
No one is going to give you anything. Have you ever asked your manager?

If you ever have had an on-call shift, or had to log in remotely to perform some work function? If so, then you qualify. You probably also qualify for them to pay for your home internet.

> Many Googlers I know have Corp set up on their personal phone.

That's stupid. Seems like a good way to get all of your data wiped off of your personal phone.

What is the company cost of the average engineer at google? It must be like...at least $300k or $400k/yr. They will pay another $600/yr for a phone and service for you if they think it will improve your productivity.

Re:Google Ends Forced Arbitration for Employees by aiiane on Friday February 22, 2019 @12:31AM (#19223353)
You have to ask for it, it won't just be given to you, but I think you're making assumptions about the answer if you asked for it.
Re:Google Ends Forced Arbitration for Employees by woolvalley on Friday February 22, 2019 @12:30PM (#19227160)
Tell your manager you wont check any work stuff on your personal devices anymore, because your worried about security, etc. The problem will either be resolved fairly quickly, or you will have better work life balance.
Re:Google Ends Forced Arbitration for Employees by kevingadd on Thursday February 21, 2019 @10:51PM (#19222975)
I never had a corp phone at Google and was never offered one. As far as I know they weren't available to me. It wasn't usually a problem but there were definitely cases where if I had a corp phone it would've made things easier - not like I was going to sync my personal phone up to corp and get it remote wiped.

They do hand out corp laptops like candy, which is great, but if you need to test software you're developing on a specific configuration, you basically have no choice but to use personal hardware. So let's say you're developing graphics code for Chrome, and there's a bug that only reproduces on a specific GPU - and you've got one at home. By doing that on your home PC have you now technically tainted it as a work machine even if you never checked out corp code onto it?

I guess alternately you just get your boss to expense a GPU and a PC and get all that set up and you can actually repro the bug like 4 weeks later once the purchases go through. Maybe corp purchasing is faster now than it used to be.

Re:Google Ends Forced Arbitration for Employees by oh_sigh on Friday February 22, 2019 @01:34AM (#19223574)
Couldn't you just buy the card yourself on amazon or whatever and expense it?

If you brought your own GPU in to do debugging for work, and you end up frying it(lets say from the bug), would you expect google to reimburse you for it?

With any company that I've experienced, there is pretty much never a need to use personal stuff for work reasons.

Re:Google Ends Forced Arbitration for Employees by aiiane on Friday February 22, 2019 @12:33AM (#19223360)
If corp purchasing is interfering with your ability to do your work, that's the corp's problem, not yours. If you choose to make it your problem and choose to solve that problem by using your own hardware, well, you made that choice.
Re:Google Ends Forced Arbitration for Employees by eeZah7Ux on Friday February 22, 2019 @06:22AM (#19224489)
It's "fairly normal" in UK perhaps and very illegal in many other countries.
Re:Google Ends Forced Arbitration for Employees by auiya on Friday February 22, 2019 @11:40AM (#19226699)
So you're saying they use the Android app permissions model?
Re:Google Ends Forced Arbitration for Employees by ChuckMcM on Friday February 22, 2019 @11:47AM (#19226757)
When they wrote mine the Android app permissions model didn't exist :-).
Re:Google Ends Forced Arbitration for Employees by throwaway987988 on Thursday February 21, 2019 @07:24PM (#19221981)
Yeah, this is real.

On a throwaway for obvious reasons, but this is from an employment contract I've seen in the past:

"I acknowledge that I have no reasonable expectation of privacy in any computer, technology system, email, handheld device, telephone, or documents that are used to conduct the business of the Company. As such, the Company has the right to audit and search all such items and systems, without further notice to me, to ensure that the Company is licensed to use the software on the Company’s devices in compliance with the Company’s software licensing policies, to ensure compliance with the Company’s policies, and for any other business-related purposes in the Company’s sole discretion. I understand that I am not permitted to add any unlicensed, unauthorized, or non-compliant applications to the Company’s technology systems and that I shall refrain from copying unlicensed software onto the Company’s technology systems or using non-licensed software or web sites. I understand that it is my responsibility to comply with the Company’s policies governing use of the Company’s documents and the internet, email, telephone, and technology systems to which I will have access in connection with my employment."

tl;dr: Any device you so much as check your work email on (which taints it as a device "used to conduct the business of the Company"), is subject to search by the Company "for any ... business-related purposes in the Company’s sole discretion" (meaning the stuff about software licensing is superfluous). So ultimately the employee has, as stated, "no reasonable expectation of privacy".

This is a case of reach-as-far-as-you-can lawyer'ing in a setting where there's likely to be little push-back from most job candidates. Takeaway: Go over this stuff with a fine-tooth comb and threaten to turn down offers from companies who try to pull this. Then if you _have_ to take the job, keep a hard boundary between your work and personal systems.

Re:Google Ends Forced Arbitration for Employees by marssaxman on Thursday February 21, 2019 @08:25PM (#19222304)
This all sounds completely normal. Do people actually imagine that the hardware they use at work is somehow theirs, and not their employer's?

"Keep a hard boundary between your work and personal systems" has always been the right answer. I am surprised that this does not seem obvious to everyone.

Re:Google Ends Forced Arbitration for Employees by int_19h on Thursday February 21, 2019 @10:38PM (#19222914)
"used to conduct the business of the company" is not the same as "employer's hardware".
Re:Google Ends Forced Arbitration for Employees by scottlamb on Friday February 22, 2019 @01:07AM (#19223484)
That's the employee's choice, though. I log in to my @google.com account with my personal phone, but I don't have to. If I'd rather keep personal and work totally separate, I can request a Google-issued phone to carry alongside my personal one. I have teammates who do this.
Re:Google Ends Forced Arbitration for Employees by Bartweiss on Friday February 22, 2019 @12:19PM (#19227048)
I agree that this doesn't seem odd in general. After the recent Facebook security team news, though, I'd want to be very careful about the exact definition of 'company systems' at Google.

I'm sure the standard usage is only about job-related hardware and accounts, but if my employer's product was my source for personal driving directions, email, and web searches, I'd want a contract that didn't transform those into employment-related activities.

Re:Google Ends Forced Arbitration for Employees by lagadu on Friday February 22, 2019 @06:23AM (#19224492)
I fail to see the issue. Hell my company went further: only their registered devices can even login to access company emails (including via web!) and other services.

Not only it protects them, it enforces the work/personal hardware separation for me, which is good. My work hardware (which is pretty much a laptop and a phone) has no traces of my personal stuff and my personal has no traces of my work stuff and can't even it I wanted it to.

I genuinely don't understand the mixing of personal and work environments. Why would anyone possibly be interested in carrying their work phones with them after their done with work?

Re:Google Ends Forced Arbitration for Employees by alistairSH on Friday February 22, 2019 @09:40AM (#19225669)
I genuinely don't understand the mixing of personal and work environments.

Convenience. I access my work calendar from my personal phone so I can check my calendar first thing in the morning. And avoid carrying/caring for a company-issued phone.

Meeting with Indian teams are rare, but when they happen, I have to be at the office an hour or two before normal. I'm always awake in time to get in, but generally have a relaxed morning - long dog walk, cooked breakfast, walk to work. If I have a 7am meeting, I have to grab a muffin and drive to work.

Re:Google Ends Forced Arbitration for Employees by ilaksh on Thursday February 21, 2019 @07:45PM (#19222098)
I had a contract with something like that in it. I told him "this says you can spy on my computer" and he was quite surprised. He had received the document from a lawyer and truly had no idea it was in there. So when I told him we had to remove the section there was no problem.
Re:Google Ends Forced Arbitration for Employees by jahn716 on Thursday February 21, 2019 @05:49PM (#19221329)
I had the exact same reaction. Shouldn't this worry the employees the most?
Re:Google Ends Forced Arbitration for Employees by joshuamorton on Thursday February 21, 2019 @06:02PM (#19221468)
I work at Google and have absolutely no clue what he's referring to.

My best guess is that it has something to do with the permissions you give Google if you add a work profile/account to your phone. But that isn't required.

Re:Google Ends Forced Arbitration for Employees by fishywang on Thursday February 21, 2019 @07:17PM (#19221929)
Also for Android users the exact point of work profile is that the surveillance is limited to only the work profile portion of your phone.
Re:Google Ends Forced Arbitration for Employees by scarmig on Thursday February 21, 2019 @07:36PM (#19222056)
You can imagine different tiers of security, where a work profile gives you minimal access to corp while a fully managed setup gives you more substantive access to corp resources and allows a company to enforce more security and visibility into the client device.
Re:Google Ends Forced Arbitration for Employees by fishywang on Friday February 22, 2019 @01:06PM (#19227519)
Yes, but at circa 2016 you cannot get higher tier of security on your personal device. You have to use a Google issued phone to get that.
Re:Google Ends Forced Arbitration for Employees by jonny_eh on Thursday February 21, 2019 @08:44PM (#19222386)
On iPhones it just allows them to wipe your phone if it's lost.
Re:Google Ends Forced Arbitration for Employees by snowflakeandrey on Thursday February 21, 2019 @07:01PM (#19221863)
That makes a lot of sense, and a legitimately personal decision. Some people don't want to share root access on the personal phone with their employer. Other people don't want to carry a separate phone for work.