Slashdot Mirror


Yale Delays Move To Gmail

Mortimer.CA writes "The Yale Daily News is reporting that the move to Gmail has been postponed. After further consultations with faculty and staff, the concerns raised 'fell into three main categories: problems with "cloud computing" (the transfer of information between virtual servers on the Internet), technological risks and downsides, and ideological issues.' In the latter category, 'Google was not willing to provide ITS with a list of countries to which the University's data could be sent [i.e., replicated], but only a list of about 15 countries to which the data would not be sent.'"

176 comments

  1. Know what... by butterflysrage · · Score: 4, Interesting

    I would be more than a little interested in that list too...

    --
    the preceding post was not spell checked... suck it.
    1. Re:Know what... by sopssa · · Score: 5, Informative

      It's probably most of the countries. Google has their own highly-redundancy file system that spans thousands of servers and even different datacenters and locations. Even data that is deleted could remain in the system for 9+ months. I think it's highly possible all of the data travels around the world and is stored in several locations.

    2. Re:Know what... by Anonymous Coward · · Score: 2, Insightful

      Why don't any of them mention privacy? Or is that what they are trivializing by calling them "ideological issues"? Why don't they just come out and say the word "privacy" and be done with it?

      I think they forget the notion that i.e. "stealing is wrong" can also be described as "ideological" but it's quite evidently more than some theory. It really is better for everyone when that "ideal" is recognized. Privacy is no different.

    3. Re:Know what... by The+Angry+Mick · · Score: 4, Informative

      I was just thinking the same thing. Our law firm is considering GMail as a possible alternative to Outlook/Exchange, and this is one question I know we overlooked. Most of our debate centered around a) loss of control over the data (Federal Discovery Rules), and b) privacy.

      --

      I'm not tense. I'm just terribly, terribly, alert.

    4. Re:Know what... by bernywork · · Score: 4, Informative

      That would be correct, if you look at their BGP advertisements it would figure that Google would have to transit it's own data.

      So if your request for data (YouTube video etc) isn't located in the DC that you connected to, they would have to transit that data across their own links. It would then make sense that they would replicate their own data over those same links during the night on that side of the world when the link is quiet.

      --
      Curiosity was framed; ignorance killed the cat. -- Author unknown
    5. Re:Know what... by sopssa · · Score: 1

      I hope you didn't consider it for long. If there's one area GMail or any other cloud provider should not be used, it's law firms.

    6. Re:Know what... by commodore64_love · · Score: 4, Interesting

      So if I'm Dutch and store my downloads from Seventeen in my Google account, and that data makes its way over to the U.S., does that mean I've committed a child porn crime?

      --
      "I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
    7. Re:Know what... by Anonymous Coward · · Score: 2, Interesting

      What's Seventeen in Holland? When I hear that name, I think of an American magazine for teenage girls.

    8. Re:Know what... by timeOday · · Score: 3, Informative

      It seems like businesses aren't going to embrace cloud computing until/unless the security issues are solved. Email should be a relatively simple case, since the message content is simply copied from point A to point B and isn't processed in between. If google simply implemented client-side encryption, and opened the source for public scrutiny, it would do a lot to address these concerns. Yes, it would mess with content analysis, spam filtering, etc... but that will simply have to be accepted/paid for.

    9. Re:Know what... by John+Hasler · · Score: 5, Interesting

      > ...does that mean I've committed a child porn crime?

      No, because _you_ have done nothing inside USA jurisdiction. It may mean Google has, though.

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    10. Re:Know what... by Anonymous Coward · · Score: 0, Troll

      May I know the name of your law firm?

    11. Re:Know what... by terraformer · · Score: 1

      > ...does that mean I've committed a child porn crime?

      No, because _you_ have done nothing inside USA jurisdiction. It may mean Google has, though.

      Even google's liability may be limited as they can claim common carrier.

      --
      Who are you? The new #2 Who is #1? You are #617565. I am not a number, I am a free man! Muhahaha.
    12. Re:Know what... by bernywork · · Score: 2, Informative

      IANAL but if you then accessed / distibuted that in the US you could be in trouble. Given that your data wouldn't be re-assembled (And certainly not in your possession) till you accessed it in The Netherlands you should be fine. Aside from plausible deniability and all that.

      Honestly, I would be more worried about the UK:

      http://www.theregister.co.uk/2009/01/24/extreme_pron_law_live/

      --
      Curiosity was framed; ignorance killed the cat. -- Author unknown
    13. Re:Know what... by Flavio · · Score: 5, Insightful

      It surprises me that you even discussed the option of having confidential documents stored on a system that makes little guarantees about security or privacy, and that by design distributes your data around the world.

    14. Re:Know what... by The+Angry+Mick · · Score: 4, Interesting

      If there's one area GMail or any other cloud provider should not be used, it's law firms.

      Oh, you'd be surprised how many have already made the switch. My firm's a non-profit, so the costs alone, or lack thereof in GMail's case, are a huge incentive to make a switch. Couple licensing fees with sharp increases in demand for management of issues like retention policies that can vary with statutes of limitations, data loss, time-based archiving, and legal compliance and its easy to understand why a lot of firms are just giving up as the headaches just don't seem worth the effort.

      Personally, I'm leery of the, but it's hard to go your boss with a proposed budget of close to $100,000 for an internally managed system versus $0 (and some geek's time) to drop the problem on someone else.

      --

      I'm not tense. I'm just terribly, terribly, alert.

    15. Re:Know what... by terraformer · · Score: 2, Interesting

      Assuming you are in the US....

      You need better lawyers in that firm. If you were concerned about privacy, you should have realized that the US government has very few privacy protections it must follow for snooping on overseas data. So if you store your stuff in Europe, the US government can get to it without much worry. They may not be able to *use it against you or your clients* in a domestic criminal or civil trial, but they can get access to it with little in the way of liability.

      --
      Who are you? The new #2 Who is #1? You are #617565. I am not a number, I am a free man! Muhahaha.
    16. Re:Know what... by teknopurge · · Score: 1

      100k? How many mailboxes do you need? 10 USD/mailbox/mth for exchange hosting.... I'm not trolling, but you do get what you pay for. If you want GMail and think it's good then great, but as you're already aware there are things you give-up for that $0.

    17. Re:Know what... by Brett+Buck · · Score: 3, Informative

      They might claim it, but that doesn't make it so.

       

    18. Re:Know what... by vlokje · · Score: 1

      Wrong! The USA claims their laws are applicable if the data passes trough a US based network

    19. Re:Know what... by Anonymous Coward · · Score: 1, Insightful

      If there's one area GMail or any other cloud provider should not be used, it's law firms.

      Oh, you'd be surprised how many have already made the switch. My firm's a non-profit, so the costs alone, or lack thereof in GMail's case, are a huge incentive to make a switch. Couple licensing fees with sharp increases in demand for management of issues like retention policies that can vary with statutes of limitations, data loss, time-based archiving, and legal compliance and its easy to understand why a lot of firms are just giving up as the headaches just don't seem worth the effort.

      Personally, I'm leery of the, but it's hard to go your boss with a proposed budget of close to $100,000 for an internally managed system versus $0 (and some geek's time) to drop the problem on someone else.

      I bet all of those terrible horrible complexities make you wish that it were a common, non-exotic, well-understood item like e-mail for which a wide array of tools and talent are available. Oh wait, it IS just e-mail and many thousands of other businesses manage it just fine...

    20. Re:Know what... by QuantumRiff · · Score: 5, Interesting

      I would be more worried about "If I'm Dutch, and doing something at a research lab at my university" whether its corporate funded, military, or maybe medical research with client data included... Would a nosy sheriff of a county with a large, competing university in the US be able to subpoena my emails, since it might be stored in the US servers?

      --

      What are we going to do tonight Brain?
    21. Re:Know what... by miffo.swe · · Score: 4, Funny

      "10 USD/mailbox/mth for exchange hosting"

      And this is different from Google how? Id much rather put my security in the hands of the best software company in the world with a stunning track record for security.

      --
      HTTP/1.1 400
    22. Re:Know what... by bernywork · · Score: 1

      OK, but he isn't a US citizen (Well doesn't indicate that he is). What are they going to do? Extradite him and charge him? If this was the case, why the hell haven't they done this to the rest of the world?

      --
      Curiosity was framed; ignorance killed the cat. -- Author unknown
    23. Re:Know what... by teknopurge · · Score: 1, Interesting

      "10 USD/mailbox/mth for exchange hosting"

      And this is different from Google how? Id much rather put my security in the hands of the best software company in the world with a stunning track record for security.

      Apparently you missed the recent issues with the Chinese govt? That was only the most recent publicized breach they had.. No offense but if you consider Gmail's track record "stunning" I would hate to see what you consider awful.

    24. Re:Know what... by astrashe · · Score: 2, Interesting

      Google owns a company called Postini that you can use to archive your email -- they can keep you in compliance with email retention rules.

      Privacy is a big concern. I sort of feel like it's over anyway -- google already knows everything about everyone.

      I found the admin tools to be a little lacking. If A is out of town, and B needs to get into their email, that sort of thing. It's harder to go in and tweak a user's settings for them than it is with our current system (notes).

    25. Re:Know what... by raju1kabir · · Score: 1

      So if your request for data (YouTube video etc) isn't located in the DC that you connected to, they would have to transit that data across their own links. It would then make sense that they would replicate their own data over those same links during the night on that side of the world when the link is quiet.

      If they're going to replicate it, and the data is traveling across their own network anyway, wouldn't it make more sense to store a copy locally while they're sending it to your browser?

      --
      "Patriotism is your conviction that this country is superior to all other countries because you were born in it." -- GBS
    26. Re:Know what... by bernywork · · Score: 1

      That one I don't know about, plausibly. I guess at that point of you have to think about your data retention laws and your requirements for keeping that data secure and whether putting it into the cloud is actually the right thing. Perhaps put it into the cloud encrypted?

      While looking for another link earlier, the city of Los Angeles ran into similar problems with their police dept and they didn't move. http://www.msnbc.msn.com/id/31967328/

      Whether Google is working with them on this one, or whether LAPD is keeping it internal is the question I guess.

      --
      Curiosity was framed; ignorance killed the cat. -- Author unknown
    27. Re:Know what... by Anonymous Coward · · Score: 0

      Nah, extradition is too much of a pain.

      But they will have cops waiting for him if he ever even flies through a US airport, and then he'll never see his home country again. Better check your transfers carefully on those international flights!

    28. Re:Know what... by vux984 · · Score: 0, Troll

      Even google's liability may be limited as they can claim common carrier.

      Their ability to claim they are a common carrier is almost categorically absurd.

    29. Re:Know what... by bernywork · · Score: 1

      Yup especially if it's something like an email fragment which you could well re-request.

      If you have enough bandwidth though..... After you have done the request for the data and it's been returned to the client, you would then have to update the master that the data is now stored on another location, which you then have to manage that data in another location. Nope, that doesn't make any sense. The front end would only get the data and that's it. If the master sees that the front end was too far away, it might ask another master to replicate the data. Again, if you had lots and lots of fibre and network bandwidth which Google apparently does, you might just wait for an intelligent sync during the off hours...

      Whether it works this way or not, I haven't seen or heard anything either way.

      --
      Curiosity was framed; ignorance killed the cat. -- Author unknown
    30. Re:Know what... by The+Angry+Mick · · Score: 1

      100k? How many mailboxes do you need?

      Hosting is still a third party solution, which brings you back to the privacy aspects. It's not so much the number of mailboxes as it is the storage needs for retention and retrieval. Attorneys operate on the assumption that NOTHING can ever be deleted. EVER. Factor in server costs, line fees, mail server hardware, storage hardware, administrative add-ons like DLP boxes, search appliances, and compliance software and you climb the cost charts pretty quick.

      --

      I'm not tense. I'm just terribly, terribly, alert.

    31. Re:Know what... by The+Angry+Mick · · Score: 1

      Surprises me as well, but the dollars can outweigh the sense when your entire budget is founded on someone else's goodwill.

      --

      I'm not tense. I'm just terribly, terribly, alert.

    32. Re:Know what... by teknopurge · · Score: 1

      I totally understand the regulatory requirements you have - still, 100k is _a lot_. It all depends on the number of mailboxes and retention policies, but I'm positive there are solutions out there that are better than spending 100k.... I'm really not intending to turf here, but there are many companies that specialize in hosting complex regulatory services.

    33. Re:Know what... by PolygamousRanchKid+ · · Score: 2, Informative

      When I hear that name, I think of an American magazine for teenage girls.

      It's a Dutch magazine for men who like teenage girls.

      Although, I'd wager that most of the "girls" have been around the track a few times since the last time that they were "teens" . . . or that anyone called them "girls," for that matter.

      --
      Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
    34. Re:Know what... by wiredlogic · · Score: 1

      Why? The basic principle is that a service provider is handling too much data to implement any sort of editorial review. It would be impractical to expect them to do so. If their motivation is to provide a service not explicitly meant to facilitate illegal activity then they shouldn't be held at fault for what they redistribute and link to.

      --
      I am becoming gerund, destroyer of verbs.
    35. Re:Know what... by The+Angry+Mick · · Score: 1

      I found the admin tools to be a little lacking.

      Surprisingly enough, this was actually fairly low on the totem pole of requirements. The assumption is that it'll be an administrator's job to create all the accounts and manage the passwords, so getting A into B's mail would be possible. Of course, that puts a lot of eggs into one basket, but that should give you an idea of how badly attorneys DO NOT want to be forced to think about the technology they use.

      I've heard good things about Postini's solution, btw. Some of the firms that have gone over to GMail swear by it.

      --

      I'm not tense. I'm just terribly, terribly, alert.

    36. Re:Know what... by Bogtha · · Score: 1

      > ...does that mean I've committed a child porn crime?

      No, because _you_ have done nothing inside USA jurisdiction.

      Tell that to Gary McKinnon and Dmitry Sklyarov.

      --
      Bogtha Bogtha Bogtha
    37. Re:Know what... by TubeSteak · · Score: 1

      Would a nosy sheriff of a county with a large, competing university in the US be able to subpoena my emails, since it might be stored in the US servers?

      As you saw with China, Google sets up a Google company for each country.
      While the data might be stored on Google's global network, the nosy sherrif would probably have to subpoena "Google Netherlands"

      If you google for "Google [Country]" you'll see what I mean.
      http://www.google.com/#q=google+france is the first one I tried.

      --
      [Fuck Beta]
      o0t!
    38. Re:Know what... by The+Angry+Mick · · Score: 4, Interesting

      Fully understand, and didn't take it as turfing.

      The problem is that in the non-profit sector you have a long history of going with the lowest common denominator. Since I've been at this firm I've had to fight for things as simple as a "thou shalt not browse the porn" policies. Because they're so technologically "green" there's often not enough of a framework in place on which to build a good system, so there's a high tendency for "rip and replace". The system I've been nursing for the last ten years is such a system, and when I announced we were approaching critical mass, we brought in consultants to analyze what was in use and recommend options based on what the attorneys said they needed.

      This is where the costs began to climb. The attorneys recommended systems that would require them to invest as little personal responsibility as possible (think: HAL 9000 level AI). Thanks to some rather unrealistic demands, and some outright paranoia, most all of the vendors came back with quotes in the 100K ballpark, and most of these dictated a complete top-to-bottom overhaul.

      Nothing's been decided yet, so we're still mushing through the options looking for cheaper alternatives.

      --

      I'm not tense. I'm just terribly, terribly, alert.

    39. Re:Know what... by Anonymous Coward · · Score: 0

      I'd be more interested in why GMail has been incredibly slow lately...

    40. Re:Know what... by Anonymous Coward · · Score: 0

      Absolutely, yeah, you put stuff that's child porn in Virginia, USA on a Google server in Virginia, USA, and you (plus probably some of Google's employees as well) will be sentenced to federal pound-you-in-the-butt prison as soon as the lawmen find out about it.

      Possession is 100% of the crime, intent and jurisdiction are explicitly not considered under the laws.

    41. Re:Know what... by Bigjeff5 · · Score: 1

      ...internally managed system

      Sorry man, you are no more qualified than Google.

      Depending on the number of users, $100k for an in-house exchange system is not that bad. A couple good servers will run you $15-20k by themselves, and licensing with Exchange is a bitch, but integration with AD and a number of other perks make it well worth it over time.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    42. Re:Know what... by FlyingBishop · · Score: 1

      While the security issues are real, I think cloud storage is probably more secure than local storage for the majority of businesses' under-funded IT departments, if only because they are not providing the resources to legitimately secure the data.

      Google offers real security (with the caveat that you don't have any control over your data) at a fraction of the cost that most businesses are paying for insecure solutions.

    43. Re:Know what... by uncqual · · Score: 1

      Also watch out for unplanned rerouting due to malfunction, emergency, or weather!

      It's gotta suck when the captain announces that due to mechanical difficulties, your flight is being rerouted to a some little country that you've never been in but which has issued an arrest warrant for something you did (who knows, maybe critiquing their leader or something).

      --
      Why is there an "insightful" mod and why isn't it "-1"? If I wanted insight, I wouldn't be reading /.
    44. Re:Know what... by FlyingBishop · · Score: 1

      Actually, Google makes a lot of guarantees about security and privacy. They provide excellent authentication and spam prevention. What they don't do is offer tight assurances that your data will be private.

      You also have to balance data integrity against security. In the most secure system possible, you're a lost password away from losing everything. In the most stable system possible, anyone who wants to can access and copy your data (helpfully making a backup.) This is the reason Google's doing so well - much of the security we have is shoddy anyway, while still giving you the data integrity issues that come from only having a handful of data storage areas, which may or may not be fully in sync.

    45. Re:Know what... by LordThyGod · · Score: 1

      Almost any MS product I can think of. Down time, bugs, configuration nightmares, virus replicator, rediculous hardware requirements, re-installation to fix "mysterious" problems, just to start with ...

    46. Re:Know what... by LordThyGod · · Score: 1

      The real issues is. google publicized this. How many exchange servers, and others out there get cracked wide open, and nobody says anything. Either because they don't want anyone to know, or they haven't figured it out yet. People are naive to think otherwise. There are any number of "small" companies subject to the same kind of thing, from the same people, or worse.

    47. Re:Know what... by DAldredge · · Score: 1

      15k per server? Something tells me you haven't priced servers recently.

    48. Re:Know what... by jim_v2000 · · Score: 1

      Help me out here...how exactly does "client side" encryption interfere with the spam filtering of unencrypted emails that come into the server? It's not like spammers are going to send encrypted spam....no one could read it.

      --
      Don't take life so seriously. No one makes it out alive.
    49. Re:Know what... by shutdown+-p+now · · Score: 2, Insightful

      No, because _you_ have done nothing inside USA jurisdiction.

      Country's jurisdiction is over anyone who ever passes through its borders. The fact that action itself takes place outside the borders doesn't matter here - if U.S. law says that something is a crime even when it doesn't happen on U.S. soil, then they can absolutely charge him, and should he ever happen to find himself in U.S. at that moment (or later) - arrest and sentence him.

    50. Re:Know what... by Tiger4 · · Score: 2, Insightful

      OK, but he isn't a US citizen (Well doesn't indicate that he is). What are they going to do? Extradite him and charge him? If this was the case, why the hell haven't they done this to the rest of the world?

      Ask Manuel Noreiga. He was rather forcefully pulled out of Panama for crimes against the United States.

      --
      Behold, this dreamer cometh. Come now, and let us slay him... and we shall see what will become of his dreams.
    51. Re:Know what... by Bronster · · Score: 2, Interesting

      I should point our sales critter at you! FastMail does very similar things, and has an archival system for businesses needing to retain all emails for discovery purposes.

      We also have very good privacy policies - plus being Australian based but with all the servers in the US, we're very well set up to protect privacy.

      Australian privacy and telecommunications law means we _can't_ comply with US subpoenas, it has to go via a convoluted mutal assistance treaty that ends up going via the Australian Attorney General. US law enforcement are a lot more willing to accept "I can't do that or I'll be breaking the law" than "I refuse on moral grounds" because any information is unusable unless it's come via the appropriate due process. It certainly puts a stop to speculative fishing!

    52. Re:Know what... by Tiger4 · · Score: 1

      Maybe privacy is too generic a term to cover what they actually care about.

      Putting your data on a server, and having the server in remote locations accessible by many other people is routine these days. They certainly can't claim Google is violating their privacy when it is just replicating a practice they already engage in.

      What is privacy in the context of an organization that certainly has multi-person access rules to any bit of data legitimately on the system? The data isn't Private if a dozen people can see it or distribute it.

      --
      Behold, this dreamer cometh. Come now, and let us slay him... and we shall see what will become of his dreams.
    53. Re:Know what... by bernywork · · Score: 1

      He got into trouble for passing data across a US network?

      I think he got into trouble for more than that.....

      --
      Curiosity was framed; ignorance killed the cat. -- Author unknown
    54. Re:Know what... by myowntrueself · · Score: 1

      Gary McKinnon was in the UK, arguably 'under USA jurisdiction'. The UK may *claim* to be an independent nation but thats debatable.

      Dmitry Sklyarov was foolish enough to visit the USA, where he was 'under USA jurisdiction' and where he was arrested.

      --
      In the free world the media isn't government run; the government is media run.
    55. Re:Know what... by cdrguru · · Score: 1

      Post-harmonization, the Dutch laws on child porn are pretty much the same as those in the US. I wouldn't know anything about this, other than getting it from a Dutch child-porn investigator. They are a customer and we talk at trade shows and such.

      I don't think even in the US you are going to have much trouble with pictures of a 17-year-old unless you rub their noses in it. Pictures of a nine-year-old will get you a jail term of an obnoxious length and they will trot out all the other pictures just to help everyone along with the verdict.

      This "harmonization" was something that I was unaware of until recently. Pretty much everywhere in Europe and most of the world now has the same laws on child porn: ages, illegal to possess, stuff like that. So I don't think the idea that child porn is OK in Holland is still effective. Until recently, it was known that you could get child-porn magazines from Holland - illegal in the US but apparently legal there. From what I have been told, this is no longer the case at all.

    56. Re:Know what... by tftp · · Score: 1

      Depending on the number of users, $100k for an in-house exchange system is not that bad.

      If you have <100 users then you need a $500 box from Fry's, then Linux, Postfix and Cyrus. If you have more users then the $100K price is probably not a concern.

    57. Re:Know what... by SETIGuy · · Score: 1

      So, what you are claiming in the McKinnon case is... If I'm standing in the U.S. near the Canadian border, and I use my assault rifle to shoot someone standing in Canada, then I haven't committed a crime in Canada, because I haven't crossed the border. And I haven't committed a crime in the U.S. because it's not a crime to discharge a firearm.

      That's very convenient. Somehow I think I would be arrested and extradited very quickly despite this.

      Gary McKinnon allegedly broke into computers in the U.S. Those computers are under U.S. jurisdiction. If the allegation is true, he commited a crime in the U.S. even though he wasn't in the U.S. at the time.

      The Sklyarov case is somewhat different in that it was a gross misapplication of an (IMHO) unconstitutional law.

    58. Re:Know what... by vux984 · · Score: 1

      The basic principle is that a service provider is handling too much data to implement any sort of editorial review.

      That however has *nothing* what so ever to do with what defines a "common carrier".

      Read up on "common carrier". American ISPs and service providers etc have fought very VERY hard AGAINST being labeled a common carrier because it would then expose them to various regulatory oversight that 'common carriers' are subject too, which they absolutely DO NOT WANT.

      Common carrier principles dictate that networks/service providers should neither discriminate due to content nor be liable for content. In particular as a "common carrier" they would be unable to engage in certain types of packet shaping, deep packet inspection, redirection, advertising injection, or engage in editorial review of content, etc, etc, etc.

      These are all things that they actually WANT TO BE ABLE TO DO at their discretion, without oversight.

      I *highly* doubt suddenly that google would do a backflip and seek 'common carrier' status.

      More importantly they already have many of the protections of a "common carrier" from other laws. The communications decency act establishes immunity for liability of 3rd party content that is libelous or slanderous. The DMCA establishes immunity from liability for copyright infringement provided they comply with DMCA take down notices etc.

      Interestingly, the case in question... transmitting illegal pornography is not something they have explicit immunity for at this time in the united states. -As far as I know-.

    59. Re:Know what... by Trinn · · Score: 1

      re: "stealing is wrong" actually that one's more of a grey area than you'd think, especially when you have the wealthy few and the corporations hoarding and you also have people trying to expand the definition of "stealing" to cover acts that don't deprive anyone of property, only "potential income", which is quite a farce because obviously you would have bought it if you could have and were inclined to do so, its still easier in some ways to do that than to hunt around for a copy, download it, etc. as for certain kinds of petty theft, in the USA at least it could easily be considered simply a form of active wealth redistribution, a sort of civil disobedience against the corporate overlords of the day. But then I know I don't speak for everyone.

    60. Re:Know what... by russ_allegro · · Score: 1

      That works for your group because your a non profit and probably less than 3000 users. If you aren't a non-profit, $100k is only 2000 gmail accounts. gmail isn't free beyond a point. Free isn't available to Yale, they have a need of more than 3000 users.

    61. Re:Know what... by Hognoxious · · Score: 1

      Why? It's the place where the the data physically is that matters. If he can get a warrant for the physical premises then that's where the door will be smashed in.

      --
      Confucius say, "Find worm in apple - bad. Find half a worm - worse."
    62. Re:Know what... by miffo.swe · · Score: 1

      The breach you talk about used vulnerabilities in Internet Explorer from Microsoft. If those people had used Google Chrome instead they wouldnt have been hacked. Or better yet, if they had used Google Chrome on a good Linux distribution like Redhat with SE Linux turned on.

      --
      HTTP/1.1 400
    63. Re:Know what... by SnowZero · · Score: 1

      It's free for educational institutions: http://www.google.com/a/help/intl/en/edu/index.html

    64. Re:Know what... by binkzz · · Score: 1

      No, because the girls from Seventeen are all 18+.

      --
      'For we walk by faith, not by sight.' II Corinthians 5:7
    65. Re:Know what... by The+Angry+Mick · · Score: 1

      That's for the tip on FastMail. Will definitely look into it.

      --

      I'm not tense. I'm just terribly, terribly, alert.

    66. Re:Know what... by teknopurge · · Score: 1

      Hasn't been that way for years....

    67. Re:Know what... by teknopurge · · Score: 1

      Why aren't you asking why they weren't? They work at google for chirst sake! They should be eating their own dogfood.

    68. Re:Know what... by davidphogan74 · · Score: 1

      Not to say anything definitive since I'm just dealing with a very small sample of firsthand data, but I've found older attachments download much slower than newer ones. I'll get 500+ KB/s on new attachments, and maybe 30 KB/s on ones that are a few months old. It wouldn't surprise me if they cache the newest items in a more-local manner, and let you pull from wherever in the cloud had space for them to store the old ones.

  2. Easy solution by Anonymous Coward · · Score: 1, Funny

    Google a list of countries... remove those 15, and there you go.

    1. Re:Easy solution by pushing-robot · · Score: 1

      Maybe Google even sent them a link.

      --
      How can I believe you when you tell me what I don't want to hear?
    2. Re:Easy solution by toastar · · Score: 1

      Google a list of countries... remove those 15, and there you go.

      There is no fucking way there are google servers in 190 some odd countries.

      I mean you really think they keep a server in the Vatican or Swaziland?

    3. Re:Easy solution by BarryJacobsen · · Score: 2, Funny

      I mean you really think they keep a server in the Vatican or Swaziland?

      Of course not! Those two were on the list :P

    4. Re:Easy solution by Anonymous Coward · · Score: 0

      The question "what countries could our data end up being sent to if we entered into a contract with you?" is not the same as the question "which countries do you currently have servers in?". Although it's unlikely that Google have a server in the Vatican there's no obvious reason for them to rule out the possibility of doing so. Most customers aren't going to insist they pick a list of X countries and stick to it. Those that do are better suited to a smaller scale supplier.

    5. Re:Easy solution by pushing-robot · · Score: 2, Funny

      Google definitely doesn't run servers in catacombs deep beneath the Vatican. The rumors are completely false that they could have a distributed storage system hidden in the endless mists of Angel Falls. And it would be utterly absurd to think they maintain a datacenter at the L2 point 1.1 million kilometers beyond the Moon.

      --
      How can I believe you when you tell me what I don't want to hear?
    6. Re:Easy solution by Applekid · · Score: 3, Insightful

      There is no fucking way there are google servers in 190 some odd countries.

      The cliche IT answer to "Where does your cloud store data?" is "Why do you want to know?" And it is with good reason.

      Are you trying to avoid embargoed countries? The list of places it will not be stored should be pretty good. Are you trying to avoid a specific country? Again, the list of places it will not be stored will reveal enough.

      If your customer (in this case, Yale would be Google's potential customer) wants data stored in a specific country, they gotta ask why instead of just caving. If you care WHERE your data is stored, then you don't really want Cloud storage. And I'm pretty sure Google would like to reserve the right to have servers in the Vatican if they got a sweet deal there.

      This is kind customers with non-functional requirements ("you should use SQL Server, I saw an ad in InformationWeek magazine that says it costs less in the long run!").

      --
      More Twoson than Cupertino
    7. Re:Easy solution by cmiller173 · · Score: 2, Funny

      ...yet.

    8. Re:Easy solution by Barryke · · Score: 1

      mod parent up.

      --
      Hivemind harvest in progress..
    9. Re:Easy solution by raju1kabir · · Score: 1

      There is no fucking way there are google servers in 190 some odd countries.

      No, but you'd be surprised how many places www.google.com is a 15ms ping from. I'm in a little middle-income country hanging off Asia's rear end, with not that many more people than metropolitan NYC, and we've got Google servers by the rackload just for the local audience.

      --
      "Patriotism is your conviction that this country is superior to all other countries because you were born in it." -- GBS
    10. Re:Easy solution by Wyatt+Earp · · Score: 1

      Well I'm in Alaska and its a 278ms ping from here.

    11. Re:Easy solution by Anonymous Coward · · Score: 1, Funny

      That's because your server is in Russia. They heard you could see it from the governor's home.

    12. Re:Easy solution by unix1 · · Score: 5, Insightful

      There is no fucking way there are google servers in 190 some odd countries.

      The cliche IT answer to "Where does your cloud store data?" is "Why do you want to know?" And it is with good reason.

      The answer is NOYB (none of your business) and it is with good reason. Even though Google provides the service, the data belongs to the customer, i.e. Yale. It is in Yale's discretion where they want to store their data and what reasons they are willing to give out to 3rd parties for doing so.

      However, I'll give you a good reason. If Google can guarantee that the data will be stored in certain countries (or even offer an option for an extra fee or whatever), then it will satisfy Yale's comfort level with respect to the privacy and legality of their data.

      For example, for argument's sake, if Google could guarantee the data would only stay in the U.S. Yale would be well aware of the legal process and rights with regard to their data. However, this may not be the case in other countries such as China, Iran, Italy, Indonesia, etc.. I bet there are plenty of Chinese students studying at Yale, and there are professors of Chinese descent who then would be exposed if the data is stored in China. If Chinese government gets access to their communication and determines it needs to put certain individuals on their watch list based on their views on free speech, human rights, government, etc. they will risk being detained and jailed next time they travel home to visit relatives or after they finish school. It is in Yale's interest to protect their faculty and students from such threats.

      And, from no reasonable perspective, does Yale have to come out and state to any 3rd party, including Google, that so and so is a member of their faculty and they have a concern that that person's communication is stored in such and such countries then they may have a problem. It's NOYB.

      On the other hand, why doesn't Google provide an additional service to their clients where they, the clients, get to pick the countries to which their data could potentially be replicated? It seems like a feature that their clients (companies, universities, governments, etc.) would very likely pay extra for; especially considering Google's own recent encounters with Chinese and Italian governments.

    13. Re:Easy solution by Bigjeff5 · · Score: 1

      This is kind customers with non-functional requirements...

      I dunno if you know this, but federal regulations have created an assload of non-functional requirements. State and local regulations add to this significantly as well.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    14. Re:Easy solution by Antiocheian · · Score: 1

      I won't; he fails to understand magnitude. Yale is not "your customer".

    15. Re:Easy solution by shutdown+-p+now · · Score: 1

      It's not a moon, it's a datacenter?

  3. RAID by JustinKSU · · Score: 1

    Could they store the data in the cloud like a RAID 0 array is set up? Only half the bits are on one server vs. another making it harder to extract data if a single server is compromised? Are they already doing something like this?

    1. Re:RAID by Anonymous Coward · · Score: 1, Insightful

      congratulations, that's officially the worst idea i've ever heard.

    2. Re:RAID by phoenixwade · · Score: 1

      congratulations, that's officially the worst idea i've ever heard.

      You don't get out much, I'm guessing, if that's the worse you've ever heard.

      --
      A positive attitude may not solve all your problems, but it will annoy enough people to make it worth the effort.
    3. Re:RAID by publiclurker · · Score: 1

      Actually storing the data like this with sufficient redundancy, error correcting, etc. would be a good way to ensure that your data survives large disasters. Not that I believe they actually do this.

    4. Re:RAID by Jazz-Masta · · Score: 1

      Could they store the data in the cloud like a RAID 0 array is set up? Only half the bits are on one server vs. another making it harder to extract data if a single server is compromised? Are they already doing something like this?

      Hmm, this may not be the best idea. It would definitely make it harder to extract the info if one server was down, in fact, it would make it impossible. With RAID 0, removing one-half of the storage will render the other half unreadable, due to the way it stores information.

      You may have been thinking of JBOD, which doesn't split the information on the member disks, but rather "lines it up" disk after disk, so there is only a small risk that information will cross over onto a different disk.

    5. Re:RAID by bernywork · · Score: 4, Informative

      Sorta, Google call them shards.

      http://news.zdnet.com/2100-9588_22-141569.html

      Shards can be located by different masters and different masters are located in different locations according to the data type.

      So I think Japan (That's where they just dropped their Asia - US cable after all, so it makes sense) has a "complete" replication of all Google data. Some data is also replicated to containers (YouTube etc) for hosting at major ISPs. So all email data would be replicated in non-realtime. If you request something that isn't in that DC it's located in the US or wherever is closest (I guess).

      There are multiple "complete" copies on the east and west coast as well as European hub sites or directly connected to European hub sites.

      If you ask for a citation, I can dig something up for you....

      --
      Curiosity was framed; ignorance killed the cat. -- Author unknown
    6. Re:RAID by ArsonSmith · · Score: 1

      depending on the data you want, usually strip size is in the 1-4k range sometimes larger sometimes smaller so while you may not be able to extract an entire database file you can get useful info out of that database.

      Experiment for at home:
      1. create a raid 0 stripe on 2 disks
      2. write a large amount of text to a file on the volume. (like an entire book in plain text)
      3. shut down system and pull out one disk
      4. restart system and run '/usr/bin/strings' on the raw disk device. (you'll find large chunks of your text)

      with this experiment it shows easily that some of the data is still there. If you're trying to recreate images or other things, a lot more knowledge of the data would be required but a partial reconstruction may still be possible.

      --
      Paying taxes to buy civilization is like paying a hooker to buy love.
    7. Re:RAID by fulldecent · · Score: 1

      Is it resident in plaintext in these offsite locations?

      --

      -- I was raised on the command line, bitch

    8. Re:RAID by pushing-robot · · Score: 4, Funny

      Only half the bits are on one server vs. another

      While this is of course theoretical, if you put all the "zero" bits on one server and the "one" bits on another, you could also achieve fantastic compression ratios.

      Come to think of it, this gives me a great idea for a defragmentation program...

      --
      How can I believe you when you tell me what I don't want to hear?
    9. Re:RAID by bernywork · · Score: 1

      Umm, ask Google?

      But honestly, would it make sense for it to be encrypted? I would think it would be too computationally expensive and increase the response time of the request to encrypt this data.

      Presumably, plain text and binary data (Video / docs etc) would be stored as just that.

      --
      Curiosity was framed; ignorance killed the cat. -- Author unknown
    10. Re:RAID by Anonymous Coward · · Score: 0

      striping across data centers seems rather awful, but striping across racks is a different story.

    11. Re:RAID by Bigjeff5 · · Score: 1

      It probably isn't encrypted, at least not for regular gmail users, but it also probably isn't in plain UTF-8 or HTML either. No doubt it's held in a custom database that wouldn't be easy to access without some knowledge of the system.

      I'm pretty sure what goes out over the interwebs is plaintext though.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    12. Re:RAID by Bigjeff5 · · Score: 1

      Come to think of it, this gives me a great idea for a defragmentation program..

      I believe they call what you're thinking of "disk wiping".

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    13. Re:RAID by bernywork · · Score: 1

      BigTable perhaps?

      http://en.wikipedia.org/wiki/BigTable

      http://static.googleusercontent.com/external_content/untrusted_dlcp/labs.google.com/en//papers/bigtable-osdi06.pdf

      So, each email segment (What you see as each email in your gmail web interface) would probably be assigned a docID which would then be put into bigtable which then went onto a gfs partition / shard.

      --
      Curiosity was framed; ignorance killed the cat. -- Author unknown
    14. Re:RAID by Anonymous Coward · · Score: 0

      Google's web cache simply stores a gzipped copy of each page they've crawled. And they use that data to build the web index.

      I don't know about the email implementation but since it allows you to view the original RFC822 message, I suspect it works in exactly the same way. i.e. A gzipped copy of every email with all the email metadata additionally in a separate database.

  4. So Cloud Computing is unsafe? by Anonymous Coward · · Score: 0

    Wait a second, you mean all my emails and documents stored at Google are actually being stored in places where they can be examined by anyone?

    1. Re:So Cloud Computing is unsafe? by eldepeche · · Score: 3, Informative

      Yeah, they just print them out and leave them in the lobby.

    2. Re:So Cloud Computing is unsafe? by bernywork · · Score: 1

      If you could get into one of their data centres, find a master (Hope it's got the index you are after) break into it, then break into the boxes (Online or offline) then re-assemble the shards, sure.

      Wouldn't it just be easier to threaten you or someone you care about and just say that something bad is going to happen unless you hand over the password?

      Honestly, if they want access to the data that badly, installing a keylogger / screendumper when your not looking would be a shitload simpler.

      --
      Curiosity was framed; ignorance killed the cat. -- Author unknown
  5. Quick Dyslexia... by damn_registrars · · Score: 0, Offtopic
    And I saw

    Yale Moves to Destroy GMail

    Which would probably make a somewhat more interesting read.

    --
    Damn_registrars has no butt-hole. Damn_registrars has no use for a butt-hole.
  6. Good for them by bogaboga · · Score: 2, Insightful

    I would delay the move for aesthetic and functional issues like:

    1: Why can't I simply move from composing an email to the many labels without being warned about losing my work? Yahoo figured this out and so should Gmail.

    2: The interface is still wanting big time. Heck this is 2010!

    3: Though Gmail's search is fast, filtering is still so basic. YahooMail's filter is good. Google can surely do better. When I search for an email from someone, I would like the opportunity to filter further "on the fly"...in real time...say by attachment type if any, subject and so on. Currently the filter functionality does not cut it!

    4: Sorting by sender, subject, time of arrival etc is non existent! This is on a service that prides itself on users never having to delete email! For those with tens of thousands of email, Gmail is mediocre!

    1. Re:Good for them by Seakip18 · · Score: 1

      You know, as a side note, I often find myself saying "I figured it'd be better now...it's freakin' 2010!!!"

      Times are a-changin'...just not that quickly.

      --
      import system.cool.Sig;
    2. Re:Good for them by BobPaul · · Score: 2, Informative

      http://mail.google.com/support/bin/answer.py?hl=en&answer=7190

      If you run a search for "sarah sextapes found" and then realize you have too many e-mails and only one you want has an attachments, go back to the search bar (which still has your filter) and add "has:attachment", then click search again.

      If you want to filter incoming e-mail, add options like "AND has:attachment" to the end of fields your already using. Such as From: "bill AND (has:attachment OR subject:more pr0n)"

    3. Re:Good for them by Bakkster · · Score: 1

      4: Sorting by sender, subject, time of arrival etc is non existent! This is on a service that prides itself on users never having to delete email! For those with tens of thousands of email, Gmail is mediocre!

      'From:{sender}', 'subject:{subject}', 'after:{mm/dd/yy}' or 'before:{mm/dd/yy}'. Problem solved?

      --
      Write your representatives! Repeal the 2nd Law of Thermodynamics!
    4. Re:Good for them by bogaboga · · Score: 1

      If you want to filter incoming e-mail, add options like "AND has:attachment" to the end of fields your already using. Such as From: "bill AND (has:attachment OR subject:more pr0n)"

      By the way, I meant filtering search results. Your suggestions work beautifully but the question is...they work for who? For the "power user", yes but for the Joe Six Pack, or my mother, I doubt this approach is more efficient than Yahoo's.

      Who is going to go back and add strings like has:attachment when for YahooMail, these search criteria are already implemented, are available and usable by a click and provide results on the fly? Even better, the has:attachment is further organized by attachment type. Who can say this is a wrong idea?

      Come-on...this is why I "reminded" Google that it's 2010.

    5. Re:Good for them by bogaboga · · Score: 2, Interesting

      'From:{sender}', 'subject:{subject}', 'after:{mm/dd/yy}' or 'before:{mm/dd/yy}'. Problem solved?

      No sir/madam!

      By just looking at what you have written, I can conclude that it will not sort! Or will it?

    6. Re:Good for them by Anonymous Coward · · Score: 0

      Why do you want to sort, when you can filter?

    7. Re:Good for them by Anonymous Coward · · Score: 0

      Joe Six Pack can click "Show Search Options" and your mom can STFU. Seriously, that wasn't cool last week.

    8. Re:Good for them by Anonymous Coward · · Score: 0

      You realize GMail is 100% IMAP compliant...right? You need a powerful interface, use a fucking desktop client and stop whining.

    9. Re:Good for them by cpghost · · Score: 1

      Sorting by sender, subject, time of arrival etc is non existent!

      Just use your favorite IMAP client to access GMail. Personally, I use GMail via IMAP too, because GMail's web interface won't display mails in non-proportional fonts, basically ruining any ASCII diagrams I get or send (or I haven't yet figured out how to configure GMail to get rid of those proportional fonts).

      --
      cpghost at Cordula's Web.
    10. Re:Good for them by vbraga · · Score: 1

      There's a Google Labs feature for that. Just activate it on your user settings.

      --
      English is not my first language. Corrections and suggestions are welcome.
    11. Re:Good for them by Bakkster · · Score: 1

      I guess not, although I've never personally missed the feature. While you're right that many common tasks take too long to perform (for me, I want to easily bookmark an 'is:unread in:inbox' search), saying GMail is behind the times ignores its other benefits. For example, I'm to busy enjoying the convenience of threaded conversations, I've rarely ever needed the other searching features.

      --
      Write your representatives! Repeal the 2nd Law of Thermodynamics!
    12. Re:Good for them by herksc · · Score: 1

      1: Why can't I simply move from composing an email to the many labels without being warned about losing my work? Yahoo figured this out and so should Gmail.

      You can and it does. Not sure why this is not working for you. It brings up a pop-up that says: "Your message has not been sent, do you want to discard? OK/Cancel". You can also click "save" at any point to put it in your drafts folder.

      2: The interface is still wanting big time. Heck this is 2010!

      This is subjective. Much better than any other web interface in my opinion. As others have said, you can use IMAP if you like. Also, the education edition which Yale would get can use an Outlook MAPI plugin (very fast!)

      3: Though Gmail's search is fast, filtering is still so basic. YahooMail's filter is good. Google can surely do better. When I search for an email from someone, I would like the opportunity to filter further "on the fly"...in real time...say by attachment type if any, subject and so on. Currently the filter functionality does not cut it!

      Again, this is a subjective interface preference. I would prefer it wait until I click "search" again.

      4: Sorting by sender, subject, time of arrival etc is non existent! This is on a service that prides itself on users never having to delete email! For those with tens of thousands of email, Gmail is mediocre!

      Try the "show search options" link. All the features you mention are included. No need to know complicated codes. I'll grant you that searching by exact hour or minute is more difficult (requires manually structuring your query), but that is a small issue easily solved by education.

    13. Re:Good for them by mr.dreadful · · Score: 1

      As a Gmail user, let me say this: who cares what the web interface looks like? I have yet to use a web interface that works as well as a desktop app, so I use a desktop app. I rarely, if ever, use Gmails interface.

    14. Re:Good for them by Anonymous Coward · · Score: 0

      Where's the button to open the terminal?

    15. Re:Good for them by robmv · · Score: 1

      You can perform the search and save a bookmark, Your example adds to the url something like this

      #search/is%3Aunread+in%3Ainbox

      Or activate the Labs feature named "Quick Links"

    16. Re:Good for them by BobPaul · · Score: 1

      You must mean "Search the Web". That lets you use all the commands you're used to.

    17. Re:Good for them by Bakkster · · Score: 1

      Awesome, thanks!

      --
      Write your representatives! Repeal the 2nd Law of Thermodynamics!
  7. I hope my school doesn't switch by Anonymous Coward · · Score: 0

    There have been talks at my college, Dartmouth, of scrapping our email system, Blitzmail, and moving to Gmail. I personally like Blitzmail, though I do agree it needs to be updated to meet the needs of the 21st century.

    For those who don't know, Blitzmail was one of the first email clients and is almost instantaneous.

    1. Re:I hope my school doesn't switch by Barryke · · Score: 1

      Never heard of Blitzmail, good read thanks. But..

      Email IS instantaneous, especially these days. Unless you use a client that checks your mail with intervals or when triggered, like POP.

      If you didnt know - FYI:
      Gmail is a ajax enabled web client and shows updates almost immediately, although most times my Android phone beats it by a second or so.
      I guess this is because it doesnt preload the new email before alerting me to its presence.

      --
      Hivemind harvest in progress..
  8. Potential support issues by dave562 · · Score: 4, Interesting

    I was considering a GAPE deployment for a much smaller organization (about 150 users) and ran into real problems finding answers to some questions. In my particular case I was considering a migration off of Exchange. The exact specifics involved were really vague and often times the suggestion was, "Talk to a solutions provider." I went ahead and talked to two of them. When I pressed them for specifics about GAPE replication of Exchange features (Public Folders for example), I got a lot of vague answers along the lines of either, A. "Well, it can kind of do that." or B. "You don't need to do that because the Google way is better."

    The major consideration that turned me away from Google was their support (or seeming complete lack of it). I had a terrible time getting my pre-sales questions answered when I went directly to Google. The "premiere partners" (companies that are trying to make a business based on deploying GAPE for organizations) were just as vague. One of them even admitted to me that they have problems getting answers out of Google about new features, or the status of outstanding issues.

    I am subscribed to a thread on Google's forums that details people's real world problems with Google support.

    http://www.google.com/support/forum/p/Google+Apps/thread?hl=en&tid=384dd0d72db87c6d

    Some of the people are obviously idiots who can't read the documentation. The large majority of them have serious problems that are ignored. Just recently someone mentioned that Google quoted them 5 days to recover an accidently deleted mailbox.

    I don't doubt that Google Apps could very well be a great product. The key is that it "could" be a great product. Great products require great support. Great products require a certain ease of implementation and use. As it stands currently, GAPE is more like a beta framework that requires a lot of heavy lifting on the part of an IT department. It is hardly a production ready, polished product that can be sold as a service.

    1. Re:Potential support issues by m93 · · Score: 2, Interesting

      What you outline here makes me think that Microsoft will have an edge in cloud based email. Say what you will about MS, but they do have tremendous support resources from their company on down to solutions providers. If they are successful in putting exchange in the cloud, it will have a lot to do with them taking advantage of the current old-school knowledge base. I couldn't imagine Google trying to port my company's (complicated but works well) exchange system over to Gmail. It would be a nightmare.

    2. Re:Potential support issues by Sycraft-fu · · Score: 2, Insightful

      I think the problem is that Google is trying to get in to a new kind of market and they aren't ready for it. They are used to providing free, no tech support kind of services. You access their site and do what you want, but if you can't figure it out, too bad, there's no number to call. Everything is very much a system where they internally decide what to provide, put it out there and see what people do with it.

      Fine for free web services, not fine for businesses. Businesses have specific needs for their enterprise applications and are going to expect them to be met, especially when there's money involved. That's going to necessitate having a support staff on hand to address that, and that the staff has the power to talk to the devs and so on if changes need to be made.

      Google is toying in a new market, but they really aren't ready for it.

    3. Re:Potential support issues by drolli · · Score: 1

      Well. When they said: "Google will be always there to answer your questions" i mean, you know hoe that works....

    4. Re:Potential support issues by martin-boundary · · Score: 1

      It works pretty well! You fire up IE, and type google.com into the url bar. Then if you have any questions, just type them into the web page...

    5. Re:Potential support issues by dcavanaugh · · Score: 1

      I agree, porting an Exchange database to gmail would indeed be difficult.

      But starting a NEW installation is much easier if you just go with Google right out of the box. E-mail, contacts, calendars -- all synchronized across PC, Mac, and smartphones. No Exchange required. No BES for your Blackberry.

      MS really does have a tremendous support system for Exchange, as does Blackberry for BES. Problem is they both need it.

    6. Re:Potential support issues by dave562 · · Score: 1

      Your suggestion fails the real world test.

      http://www.google.com/search?q=recover+deleted+google+apps+mailbox&rls=com.microsoft:en-us&ie=UTF-8&oe=UTF-8&startIndex=&startPage=1

      Google Apps large scale IMAP migrations? What does that have to do with recovering data? Can I please give my email to Google? I thought I was searching for "recover deleted mailbox".

      To throw more fuel onto the fire.

      http://www.google.com/search?q=recover+deleted+exchange+mailbox&rls=com.microsoft:en-us&ie=UTF-8&oe=UTF-8&startIndex=&startPage=1

      Look at that. A full page of results about how to recover deleted Exchange mailboxes.

      Conclusion? Microsoft software sucks. Look how much time people have to spend recovering lost Exchange mailboxes. There are pages worth of information on how to do it. Google software rocks. Their applications are so uber that they don't even need to document how to do those barbaric things that "other" companies do, like recovering accidently deleted mailboxes.

    7. Re:Potential support issues by Anonymous Coward · · Score: 0

      Duh. If you haven't purchased support from Google, they won't support you. Support is about the only thing that differentiates their freemium model.

  9. So which countries does Yale consider "bad?" by Ambiguous+Coward · · Score: 1

    Google was not willing to provide ITS with a list of countries to which the University's data could be sent [i.e., replicated], but only a list of about 15 countries to which the data would not be sent.

    Okay, so did ITS compose a list of countries it felt were unacceptable (along with logical reasons for why)? And if so, which countries, specifically, were on ITS' list that weren't on Google's list? Serious, I'd love to know which countries Yale has a beef with that Google doesn't.

    --
    Their may be a grammatical error, misspeling, or evn a typo in this post.
    1. Re:So which countries does Yale consider "bad?" by raju1kabir · · Score: 1

      I'd love to know which countries Yale has a beef with

      I don't "have a beef" with most random people on the street, but if my bank is proposing to distribute bits of my money to them, I'd like to know who they are.

      --
      "Patriotism is your conviction that this country is superior to all other countries because you were born in it." -- GBS
    2. Re:So which countries does Yale consider "bad?" by PolygamousRanchKid+ · · Score: 1

      The US government decides who's naughty or nice. Google "us export restricted countries" and you will find the list.

      The government usually lets companies, universities and whatever ship products and stuff around the world without much ado. In other words, your company does its own control, and just sends a list at the end of the year to the government and says, "I exported X widgets to Spain. However, your are NOT allowed to ship to the countries "on the list" without special permission. If you are caught doing that . . . welly, welly, welly . . . well, well, well little Alex!

      The government can slap you with a penalty that requires you to get an export permit for every printer cable, or whatever that you want to send anywhere in the world. In other words, the government will now do the controlling. This would bankrupt a large, international company really fast. Which is why large, international companies require that their employees complete and sign off on an US export restrictions education course.

      This applies to software and services, as well.

      Google's "list of 15" is probably just the US government list. Google stays out of there to keep that meddling government out of their plans for world domination.

      Oh, and for US citizens, a violation of the export restrictions can win you a charge of treason. If you get caught selling plutonium to Iran, you might want to cash in your life insurance, because the policy probably doesn't cover execution.

      --
      Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
    3. Re:So which countries does Yale consider "bad?" by Anonymous Coward · · Score: 1, Insightful

      Wait.. you do know how banks work, right?

    4. Re:So which countries does Yale consider "bad?" by maxume · · Score: 1

      It's much more plausible that they simply don't want their data (silently) crossing any borders.

      --
      Nerd rage is the funniest rage.
    5. Re:So which countries does Yale consider "bad?" by Kiliani · · Score: 1

      Well, there are the "International Traffic in Arms Regulations" that regulate the export not only of defense articles (those seem obvious), but also of hardware that can be used to create space hardware (launchers, rockets, scientific experiments, the Space station, basically anything NASA builds and puts into space, including certain software). Export to any foreign national other than US citizens and US resident aliens is illegal without proper license. Violations carry heavy fines. To me working on a NASA (hardware) project and using a Google email account is probably highly problematic if not just plain stupid. So, in other words, any (!) country other than the US for those purposes is the wrong country.

      --
      Do your own thing. And overdo it!
    6. Re:So which countries does Yale consider "bad?" by Bigjeff5 · · Score: 1

      Obviously he doesn't.

      --
      Security is mostly a superstition... Avoiding danger is no safer in the long run than outright exposure. - Helen Keller
    7. Re:So which countries does Yale consider "bad?" by Ambiguous+Coward · · Score: 1

      My side point was that if they ask which countries the data WILL be in, and Google responds with which countries it WON'T be in, the reasonable response would be to assume it MAY be in ALL OTHER countries. Then, just compare that list with your no-no list. Sometimes it's easier to list out the negation. :)

      --
      Their may be a grammatical error, misspeling, or evn a typo in this post.
    8. Re:So which countries does Yale consider "bad?" by maxume · · Score: 1

      Yeah, I understood. My point was that their no-no list is likely "everywhere outside of the United States".

      So if Google won't make promises about where the data will end up (Google was only willing to make promises about where it would not end up), it doesn't really matter where it won't end up.

      It is sort of surprising that Google isn't willing to offer national partitioning though, I would think there are lots of businesses that would be comfortable storing data on Google infrastructure but would not want to expose themselves to other legalities.

      --
      Nerd rage is the funniest rage.
    9. Re:So which countries does Yale consider "bad?" by John+Hasler · · Score: 1

      You don't know what the hell you are talking about.

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
  10. I suck at parsing by Alarindris · · Score: 0, Offtopic

    I hope the Yale Delays that Gmail now has doesn't affect my account!

  11. Memo To Prospective Gmail Users by Anonymous Coward · · Score: 0

    You better make backups of your Gmail.

    What do you do when Google is purchased by China.

    Yours In Astrakhan,
    Kilgore Trout

  12. Gmail wouldn't be their weakest link by copponex · · Score: 1, Interesting

    If you forced a login with a quick time out for all of those gmail accounts, that's a hell of a lot more secure than storing the documents on your laptop, which can be stolen and broken pretty easily. (These kids aren't going to password protect bootup and encrypt the hard drive. ) If you need an e-mail even if the internet is down, it should probably be in your notes in your word processor anyway. And unless you're not going to use WiFi, you are already sending your data over insecure connections.

    And if you think other ISPs don't give up your data already... well, you're just not paying attention.

    If you want to use and share data on the internet, there are risks. If you want to remember something that cannot possibly be intercepted by a third party, write it down on a piece of paper, put it in a safe, and hope no one steals the safe.

    1. Re:Gmail wouldn't be their weakest link by fluffernutter · · Score: 1

      So basically you're saying go with google or we are all screwed? I sincerely hope you are not an IT consultant.

      Scratch that, you're probably Yale's IT consultant.

      --
      Laws are rules for the court, but merely a bottom bar to hit for life. Think beyond laws in your actions always.
    2. Re:Gmail wouldn't be their weakest link by copponex · · Score: 1

      You don't have to go with Google. I was just pointing out that an unencrypted laptop is vastly more insecure than hosting your e-mail at an ISP, with proper password policies and session timeouts.

      The hysteria about cloud computing is just a sideshow to actual security concerns, like physical access, multiple layers of encryption, and the social engineering that usually negates the first two. And if you don't know that, I hope you aren't an IT consultant.

  13. How about delaying due to .... FERPA by Anonymous Coward · · Score: 1, Interesting

    The Family Educational Right to Privacy Act.

    Seems to me that Yale is under the purview of this law, and therefore must have control over the disclosure of student records.

    Does Gmail still do grepping of the emails for targeted advertising in these corporate-agreement hosting situations? If so...big problem. At my college, I can't even send an email to a student unless its sent from/to an address in our internal, private (https only) webmail system.

    1. Re:How about delaying due to .... FERPA by dkuntz · · Score: 1

      In my use of Google Apps Premium, there were no ads at all, and thats because they are getting money from you already. Probably not as much as the advertising, but still, $50 per mailbox per year.

      If someone really wants their email to stay private, have it sent encrypted... decrypt it, read it, delete it, and use a secure wipe on the blocks that contained the data. Then take out the hard drive, crack it open, take a dremel to the platters, then bend them all into funky angles. But save the magnets! Those are good magnets.

      --
      OMG... I have a sig?
    2. Re:How about delaying due to .... FERPA by graphicartist82 · · Score: 1

      Google Apps Education Edition has no ads.

    3. Re:How about delaying due to .... FERPA by Z_A_Commando · · Score: 1

      My institution, Indiana University, has already contracted our student email services out. We actually have two systems: Imail (hosted by Microsoft on Windows Live) and Umail (hosted by Google on Gmail). Both of these are the ad-free versions and you have to use a secure University URL to log in to them (i.e. you can't just use gmail.com). Furthermore, the Global Address List from Active Directory are available inside these services as well. We've always been on the cutting edge of technology use though, and my guess is that these systems are FERPA compliant because UITS is big on CTA. After all, you have the option of forwarding your emails outside of the university anyway.

      After your time at the university is over, your account automatically reverts to an ad-supported version, but you don't lose your email address. Something important to note, however, is that faculty and staff are not permitted to use the external systems and instead must use the in-house Exchange or Webmail services.

  14. point 11 on the google tos ? by Anonymous Coward · · Score: 0

    How about the point number 11 on the tos ???

    http://www.google.com/accounts/TOS

  15. I want a Google App Appliance. Please? by DdJ · · Score: 1

    So, if you use Google for search, you can buy a "Google search appliance" and install it in your machine room and use that to provide your service.

    I really, really want the same thing for Google Apps. The question of whether storing a document in "Google Docs" violates FERPA or something simply doesn't come up if the box is sealed in a room on a private network that you have tight control over. Running our own GMail and Google Calendar server appliances in our machine room just wouldn't make the lawyers nearly as nervous as a move to "the cloud".

  16. And what about their current system? by Qwavel · · Score: 1

    The concerns about the Google cloud need to be weighed against Yale's current system. Every system has vulnerabilities.

    Whatever countries they are worried about, are they sure that people from those countries can't hack into their systems and find what they are after more easily then they can do same for Google's systems?

    What about the danger from someone within Yale's organization (one of the most common threats)? Is that worse with Gmail or with their current system?

    1. Re:And what about their current system? by sexconker · · Score: 1, Insightful

      It's not about hacks - it's about evil foreign governments physically seizing servers. Redundant or not, secure or not, try telling the Pentagon that your nuclear research is in the hands of evil foreign powers.

      Sure, they'll reply "Yeah, we know. Our is too! LOL!", but your ass is still going to the gulag.

  17. Same Thing Here by sexconker · · Score: 0

    One of the big points of contention for [MAJOR UNIVERSITY I HAPPEN TO WORK FOR] is getting the vendor to guarantee data stays on US soil.

    The bottom line is that if people buy into Google now, we won't get the guarantee. If people hold out, or go to other vendors that can promise that, Google will cave.

    Good on Yale. Now stop making your students kill themselves.

  18. Finally some common sense by oldhack · · Score: 2, Insightful

    It would be pathetic if Yale, one of the richest schools, can't spare some fund to maintain its own email system. Tuition there is, what, approaching 40k a year?

    --
    Fuck systemd. Fuck Redhat. Fuck Soylent, too. Wait, scratch the last one.
    1. Re:Finally some common sense by Anonymous Coward · · Score: 0

      It's not about what Yale can afford, but whether maintaining their own email system is worth the cost. If Yale can get email service cheaper or better (or both) through GMail, then Yale should switch over (I don't know whether they can or not).

      Veering OT here, but the nice thing about Yale and many, perhaps all of the other Ivies is that you can attend them even if you're poor since they guarantee financial aid for those who cannot afford the cost of tuition (though at some you have to be a US citizen, too). Of course, you have to get admitted first! Anyway, the cost of tuition is important only to those who can afford it.

    2. Re:Finally some common sense by Colz+Grigor · · Score: 1

      Because it makes so much sense for a research institution to maintain an IT staff and a data center for their email servers...

  19. Apps Gmail lacks features: SHARED Inbox!? by Barryke · · Score: 1

    Other reasons hold me off:
    The gmail solution in Apps doesn't allow for shared inboxes. Does anyone know a way around this??

    Say some public email address that 4 people (a team) has access to, without duplicating *shudder* emails 4 times and losing track.

    --
    Hivemind harvest in progress..
    1. Re:Apps Gmail lacks features: SHARED Inbox!? by Firehawke · · Score: 1

      You can set up mailing list addresses that you can assign to one or more people.

    2. Re:Apps Gmail lacks features: SHARED Inbox!? by Trinn · · Score: 1

      user-managed Groups? that way it could just be posted to the Group, and not technically duplicated (though users could choose to receive e-mail about each posting)

  20. Privacy in Canada by Great+Big+Bird · · Score: 1

    A school I applied to (Lakehead in Thunder Bay), uses gmail. As far as I can remember there is a certain amount of data that a university deals with cannot be transferred out of Canada due to our privacy laws. I hope they don't fall afoul of that.

  21. Privacy? What Privacy? by Anonymous Coward · · Score: 0

    When will people realize that there is no such thing as privacy on the internet?

  22. Some good concerns, but mostly FUD/ignorance by anderiv · · Score: 3, Informative

    We're going through this same conversation at my employer (a higher-ed liberal arts university). This article came up yesterday in my team, and we had a bit of a discussion about it. Here's the email I sent out to the group about the article and Yale's decision. Hopefully this will help to clear up some of the misinformation in the article.

    > Several members of the committee thought ITS had made the decision
    > to move to Gmail too quickly and without University approval, Fischer
    > said.

    Well yah, of course that's going to be a problem.

    > Google stores every piece of data in three centers randomly chosen
    > from the many it operates worldwide in order to guard the company’s
    > ability to recover lost information — but that also makes the data
    > subject to the vagaries of foreign laws and governments"

    Several other schools have fought this fight with Google and have gotten
    them to agree that all of their data will stay in the country.

    > Under the proposed switch, Yale might lose control over its data

    No, No, No. Google makes it very clear to its customers that the data is
    always "owned" by the customer.

    > or could seem to endorse Google corporate policy and the large
    > carbon footprint left by the company’s massive data centers

    For many years, Google has been a pioneer in building efficient, green
    datacenters. I guarantee you that proportionally-speaking, Yale's
    segment of Google's network has a *much* smaller carbon footprint than
    Yale's self-hosted system.

    1. Re:Some good concerns, but mostly FUD/ignorance by BlueBoxSW.com · · Score: 1

      Ran out of mod points today, sorry.

      But I agree with your post and points.

      NOTHING moves too quickly at a University without getting shot at.

  23. Anyone else done this, comments? by AbRASiON · · Score: 2, Interesting

    I'm considering doing this for a small business I support.

    It's about 15 users and they currently run exchange, I'm tired of supporting it and frankly too lazy, people keep suggesting google handling the mail.
    I've set up a test domain and used Outlook and Thunderbird to connect to it via IMAP (that's the right way to do it, right?)

    I'm in Australia on ADSL2 links, 20mbit and 16mbit are the 2 I've tested from, the performance seems 'laggy' and I'm curious what the cache implimentation of Outlook 2007 is like?
    I want the users experience to be very close to what they get with exchange or at least comparable.

    The users have huge mailboxes (most of their work is email - a LOT of communications) so they need massive mailboxes - the smallest is 1gb and some of them have them in the 15gb range. (Please, please don't tell me 'you're doing it wrong' or 'users need to be trained to XYZ' - this is how they work, this works for them and helps them get stuff done better, it needs to be this way)
    Now the first major issue, besides the lag on IMAP is the folder limitation google have in place. I can create folders and subfolders and more subfolders but the path depth for the folders is quite shallow compared to an outlook PST. This is due to 'folders' being implimented via tags on gmail :/ Does anyone know a way around this or plans for it to change?
    I agree the users shouldn't have ridiculous folder depth but they really do need fairly extensive folder information
    \name of project\name of company\name of person\ for example is pretty difficult to do via IMAP Gmail :/

    Anyone else have some overall general comments about moving to externally hosted mail with google (or someone else?)

    1. Re:Anyone else done this, comments? by Buelldozer · · Score: 1

      I must be missing something. For 15 users, even ones with mailboxes as big as you claim, Exchange is essentially fire and forget. If all 15 of your users are using 15G that's a 225G store size, which is well within the limits for Exchange 2007.

      What are you doing that makes you "tired of supporting it"?

    2. Re:Anyone else done this, comments? by Anonymous Coward · · Score: 0

      If the business making a money relies on Exchange + Outlook (and all the little quirks, rules, systems, they've set up over the years) I would advise you to invest properly in Exchange and forget about Google. It won't end well, unless they know what they are getting.

      GMail does NOT equal Exchange. It's not even close.

    3. Re:Anyone else done this, comments? by tokul · · Score: 1

      It's about 15 users and they currently run exchange, I'm tired of supporting it and frankly too lazy, people keep suggesting google handling the mail. I've set up a test domain and used Outlook and Thunderbird to connect to it via IMAP (that's the right way to do it, right?)

      Wrong. You can't compare performance of standalone IMAP client with gmail. Test IMAP based webmail and your IMAP server should not be Exchange. IMAP server should be Cyrus or Dovecot.

  24. my school did it by Anonymous Coward · · Score: 0

    my school moved the student emails to gmail. They used to have an exchange server but they were never quite smart to lock it up, so it was better in general imo. Gmail also supported IMAP which they didn't have enabled when their had their own servers for students.

  25. So... I'm at least as smart as some PTB at Yale... by Anonymous Coward · · Score: 0

    That's cool.

    Google is great and all...... but uhhhhh, they have a massive potential for abuse from soooo many angles. :(

    I'm glad that at least a few institutions are refraining from getting sucked into the hive.

  26. Wow. by Enahs · · Score: 1

    Nice to see Yale sum up my problems with cloud computing.

    --
    Stating on Slashdot that I like cheese since 1997.
  27. It ain't rocket science... by Just+Brew+It! · · Score: 1

    OK, so there are "about 15" countries Google says they won't send your data to?

    Here's the solution: Take the list of 203 sovereign states, and knock out the "about 15" that are on Google's "we don't like you, nyah nyah a boo boo" list. Presto, you now have the list of countries to which Google may send your data.

    The geniuses at Yale couldn't figure this out? (I guess that isn't entirely surprising, given that they seem to be having trouble counting to 15...)