Slashdot Mirror
Yale Delays Move To Gmail
Mortimer.CA writes "The Yale Daily News is reporting that the move to Gmail has been postponed. After further consultations with faculty and staff, the concerns raised 'fell into three main categories: problems with "cloud computing" (the transfer of information between virtual servers on the Internet), technological risks and downsides, and ideological issues.' In the latter category, 'Google was not willing to provide ITS with a list of countries to which the University's data could be sent [i.e., replicated], but only a list of about 15 countries to which the data would not be sent.'"
It surprises me that you even discussed the option of having confidential documents stored on a system that makes little guarantees about security or privacy, and that by design distributes your data around the world.
There is no fucking way there are google servers in 190 some odd countries.
The cliche IT answer to "Where does your cloud store data?" is "Why do you want to know?" And it is with good reason.
Are you trying to avoid embargoed countries? The list of places it will not be stored should be pretty good. Are you trying to avoid a specific country? Again, the list of places it will not be stored will reveal enough.
If your customer (in this case, Yale would be Google's potential customer) wants data stored in a specific country, they gotta ask why instead of just caving. If you care WHERE your data is stored, then you don't really want Cloud storage. And I'm pretty sure Google would like to reserve the right to have servers in the Vatican if they got a sweet deal there.
This is kind customers with non-functional requirements ("you should use SQL Server, I saw an ad in InformationWeek magazine that says it costs less in the long run!").
More Twoson than Cupertino
There is no fucking way there are google servers in 190 some odd countries.
The cliche IT answer to "Where does your cloud store data?" is "Why do you want to know?" And it is with good reason.
The answer is NOYB (none of your business) and it is with good reason. Even though Google provides the service, the data belongs to the customer, i.e. Yale. It is in Yale's discretion where they want to store their data and what reasons they are willing to give out to 3rd parties for doing so.
However, I'll give you a good reason. If Google can guarantee that the data will be stored in certain countries (or even offer an option for an extra fee or whatever), then it will satisfy Yale's comfort level with respect to the privacy and legality of their data.
For example, for argument's sake, if Google could guarantee the data would only stay in the U.S. Yale would be well aware of the legal process and rights with regard to their data. However, this may not be the case in other countries such as China, Iran, Italy, Indonesia, etc.. I bet there are plenty of Chinese students studying at Yale, and there are professors of Chinese descent who then would be exposed if the data is stored in China. If Chinese government gets access to their communication and determines it needs to put certain individuals on their watch list based on their views on free speech, human rights, government, etc. they will risk being detained and jailed next time they travel home to visit relatives or after they finish school. It is in Yale's interest to protect their faculty and students from such threats.
And, from no reasonable perspective, does Yale have to come out and state to any 3rd party, including Google, that so and so is a member of their faculty and they have a concern that that person's communication is stored in such and such countries then they may have a problem. It's NOYB.
On the other hand, why doesn't Google provide an additional service to their clients where they, the clients, get to pick the countries to which their data could potentially be replicated? It seems like a feature that their clients (companies, universities, governments, etc.) would very likely pay extra for; especially considering Google's own recent encounters with Chinese and Italian governments.