Slashdot Mirror


Yale Delays Move To Gmail

Mortimer.CA writes "The Yale Daily News is reporting that the move to Gmail has been postponed. After further consultations with faculty and staff, the concerns raised 'fell into three main categories: problems with "cloud computing" (the transfer of information between virtual servers on the Internet), technological risks and downsides, and ideological issues.' In the latter category, 'Google was not willing to provide ITS with a list of countries to which the University's data could be sent [i.e., replicated], but only a list of about 15 countries to which the data would not be sent.'"

39 of 176 comments (clear)

  1. Know what... by butterflysrage · · Score: 4, Interesting

    I would be more than a little interested in that list too...

    --
    the preceding post was not spell checked... suck it.
    1. Re:Know what... by sopssa · · Score: 5, Informative

      It's probably most of the countries. Google has their own highly-redundancy file system that spans thousands of servers and even different datacenters and locations. Even data that is deleted could remain in the system for 9+ months. I think it's highly possible all of the data travels around the world and is stored in several locations.

    2. Re:Know what... by Anonymous Coward · · Score: 2, Insightful

      Why don't any of them mention privacy? Or is that what they are trivializing by calling them "ideological issues"? Why don't they just come out and say the word "privacy" and be done with it?

      I think they forget the notion that i.e. "stealing is wrong" can also be described as "ideological" but it's quite evidently more than some theory. It really is better for everyone when that "ideal" is recognized. Privacy is no different.

    3. Re:Know what... by The+Angry+Mick · · Score: 4, Informative

      I was just thinking the same thing. Our law firm is considering GMail as a possible alternative to Outlook/Exchange, and this is one question I know we overlooked. Most of our debate centered around a) loss of control over the data (Federal Discovery Rules), and b) privacy.

      --

      I'm not tense. I'm just terribly, terribly, alert.

    4. Re:Know what... by bernywork · · Score: 4, Informative

      That would be correct, if you look at their BGP advertisements it would figure that Google would have to transit it's own data.

      So if your request for data (YouTube video etc) isn't located in the DC that you connected to, they would have to transit that data across their own links. It would then make sense that they would replicate their own data over those same links during the night on that side of the world when the link is quiet.

      --
      Curiosity was framed; ignorance killed the cat. -- Author unknown
    5. Re:Know what... by commodore64_love · · Score: 4, Interesting

      So if I'm Dutch and store my downloads from Seventeen in my Google account, and that data makes its way over to the U.S., does that mean I've committed a child porn crime?

      --
      "I disapprove of what you say, but I will defend to the death your right to say it." - historian Evelyn Beatrice Hall
    6. Re:Know what... by Anonymous Coward · · Score: 2, Interesting

      What's Seventeen in Holland? When I hear that name, I think of an American magazine for teenage girls.

    7. Re:Know what... by timeOday · · Score: 3, Informative

      It seems like businesses aren't going to embrace cloud computing until/unless the security issues are solved. Email should be a relatively simple case, since the message content is simply copied from point A to point B and isn't processed in between. If google simply implemented client-side encryption, and opened the source for public scrutiny, it would do a lot to address these concerns. Yes, it would mess with content analysis, spam filtering, etc... but that will simply have to be accepted/paid for.

    8. Re:Know what... by John+Hasler · · Score: 5, Interesting

      > ...does that mean I've committed a child porn crime?

      No, because _you_ have done nothing inside USA jurisdiction. It may mean Google has, though.

      --
      Warning: this article may contain humor, sarcasm, parody, and perhaps even irony. Read at your own risk.
    9. Re:Know what... by bernywork · · Score: 2, Informative

      IANAL but if you then accessed / distibuted that in the US you could be in trouble. Given that your data wouldn't be re-assembled (And certainly not in your possession) till you accessed it in The Netherlands you should be fine. Aside from plausible deniability and all that.

      Honestly, I would be more worried about the UK:

      http://www.theregister.co.uk/2009/01/24/extreme_pron_law_live/

      --
      Curiosity was framed; ignorance killed the cat. -- Author unknown
    10. Re:Know what... by Flavio · · Score: 5, Insightful

      It surprises me that you even discussed the option of having confidential documents stored on a system that makes little guarantees about security or privacy, and that by design distributes your data around the world.

    11. Re:Know what... by The+Angry+Mick · · Score: 4, Interesting

      If there's one area GMail or any other cloud provider should not be used, it's law firms.

      Oh, you'd be surprised how many have already made the switch. My firm's a non-profit, so the costs alone, or lack thereof in GMail's case, are a huge incentive to make a switch. Couple licensing fees with sharp increases in demand for management of issues like retention policies that can vary with statutes of limitations, data loss, time-based archiving, and legal compliance and its easy to understand why a lot of firms are just giving up as the headaches just don't seem worth the effort.

      Personally, I'm leery of the, but it's hard to go your boss with a proposed budget of close to $100,000 for an internally managed system versus $0 (and some geek's time) to drop the problem on someone else.

      --

      I'm not tense. I'm just terribly, terribly, alert.

    12. Re:Know what... by terraformer · · Score: 2, Interesting

      Assuming you are in the US....

      You need better lawyers in that firm. If you were concerned about privacy, you should have realized that the US government has very few privacy protections it must follow for snooping on overseas data. So if you store your stuff in Europe, the US government can get to it without much worry. They may not be able to *use it against you or your clients* in a domestic criminal or civil trial, but they can get access to it with little in the way of liability.

      --
      Who are you? The new #2 Who is #1? You are #617565. I am not a number, I am a free man! Muhahaha.
    13. Re:Know what... by Brett+Buck · · Score: 3, Informative

      They might claim it, but that doesn't make it so.

       

    14. Re:Know what... by QuantumRiff · · Score: 5, Interesting

      I would be more worried about "If I'm Dutch, and doing something at a research lab at my university" whether its corporate funded, military, or maybe medical research with client data included... Would a nosy sheriff of a county with a large, competing university in the US be able to subpoena my emails, since it might be stored in the US servers?

      --

      What are we going to do tonight Brain?
    15. Re:Know what... by miffo.swe · · Score: 4, Funny

      "10 USD/mailbox/mth for exchange hosting"

      And this is different from Google how? Id much rather put my security in the hands of the best software company in the world with a stunning track record for security.

      --
      HTTP/1.1 400
    16. Re:Know what... by astrashe · · Score: 2, Interesting

      Google owns a company called Postini that you can use to archive your email -- they can keep you in compliance with email retention rules.

      Privacy is a big concern. I sort of feel like it's over anyway -- google already knows everything about everyone.

      I found the admin tools to be a little lacking. If A is out of town, and B needs to get into their email, that sort of thing. It's harder to go in and tweak a user's settings for them than it is with our current system (notes).

    17. Re:Know what... by PolygamousRanchKid+ · · Score: 2, Informative

      When I hear that name, I think of an American magazine for teenage girls.

      It's a Dutch magazine for men who like teenage girls.

      Although, I'd wager that most of the "girls" have been around the track a few times since the last time that they were "teens" . . . or that anyone called them "girls," for that matter.

      --
      Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
    18. Re:Know what... by The+Angry+Mick · · Score: 4, Interesting

      Fully understand, and didn't take it as turfing.

      The problem is that in the non-profit sector you have a long history of going with the lowest common denominator. Since I've been at this firm I've had to fight for things as simple as a "thou shalt not browse the porn" policies. Because they're so technologically "green" there's often not enough of a framework in place on which to build a good system, so there's a high tendency for "rip and replace". The system I've been nursing for the last ten years is such a system, and when I announced we were approaching critical mass, we brought in consultants to analyze what was in use and recommend options based on what the attorneys said they needed.

      This is where the costs began to climb. The attorneys recommended systems that would require them to invest as little personal responsibility as possible (think: HAL 9000 level AI). Thanks to some rather unrealistic demands, and some outright paranoia, most all of the vendors came back with quotes in the 100K ballpark, and most of these dictated a complete top-to-bottom overhaul.

      Nothing's been decided yet, so we're still mushing through the options looking for cheaper alternatives.

      --

      I'm not tense. I'm just terribly, terribly, alert.

    19. Re:Know what... by shutdown+-p+now · · Score: 2, Insightful

      No, because _you_ have done nothing inside USA jurisdiction.

      Country's jurisdiction is over anyone who ever passes through its borders. The fact that action itself takes place outside the borders doesn't matter here - if U.S. law says that something is a crime even when it doesn't happen on U.S. soil, then they can absolutely charge him, and should he ever happen to find himself in U.S. at that moment (or later) - arrest and sentence him.

    20. Re:Know what... by Tiger4 · · Score: 2, Insightful

      OK, but he isn't a US citizen (Well doesn't indicate that he is). What are they going to do? Extradite him and charge him? If this was the case, why the hell haven't they done this to the rest of the world?

      Ask Manuel Noreiga. He was rather forcefully pulled out of Panama for crimes against the United States.

      --
      Behold, this dreamer cometh. Come now, and let us slay him... and we shall see what will become of his dreams.
    21. Re:Know what... by Bronster · · Score: 2, Interesting

      I should point our sales critter at you! FastMail does very similar things, and has an archival system for businesses needing to retain all emails for discovery purposes.

      We also have very good privacy policies - plus being Australian based but with all the servers in the US, we're very well set up to protect privacy.

      Australian privacy and telecommunications law means we _can't_ comply with US subpoenas, it has to go via a convoluted mutal assistance treaty that ends up going via the Australian Attorney General. US law enforcement are a lot more willing to accept "I can't do that or I'll be breaking the law" than "I refuse on moral grounds" because any information is unusable unless it's come via the appropriate due process. It certainly puts a stop to speculative fishing!

  2. Good for them by bogaboga · · Score: 2, Insightful

    I would delay the move for aesthetic and functional issues like:

    1: Why can't I simply move from composing an email to the many labels without being warned about losing my work? Yahoo figured this out and so should Gmail.

    2: The interface is still wanting big time. Heck this is 2010!

    3: Though Gmail's search is fast, filtering is still so basic. YahooMail's filter is good. Google can surely do better. When I search for an email from someone, I would like the opportunity to filter further "on the fly"...in real time...say by attachment type if any, subject and so on. Currently the filter functionality does not cut it!

    4: Sorting by sender, subject, time of arrival etc is non existent! This is on a service that prides itself on users never having to delete email! For those with tens of thousands of email, Gmail is mediocre!

    1. Re:Good for them by BobPaul · · Score: 2, Informative

      http://mail.google.com/support/bin/answer.py?hl=en&answer=7190

      If you run a search for "sarah sextapes found" and then realize you have too many e-mails and only one you want has an attachments, go back to the search bar (which still has your filter) and add "has:attachment", then click search again.

      If you want to filter incoming e-mail, add options like "AND has:attachment" to the end of fields your already using. Such as From: "bill AND (has:attachment OR subject:more pr0n)"

    2. Re:Good for them by bogaboga · · Score: 2, Interesting

      'From:{sender}', 'subject:{subject}', 'after:{mm/dd/yy}' or 'before:{mm/dd/yy}'. Problem solved?

      No sir/madam!

      By just looking at what you have written, I can conclude that it will not sort! Or will it?

  3. Re:So Cloud Computing is unsafe? by eldepeche · · Score: 3, Informative

    Yeah, they just print them out and leave them in the lobby.

  4. Re:RAID by bernywork · · Score: 4, Informative

    Sorta, Google call them shards.

    http://news.zdnet.com/2100-9588_22-141569.html

    Shards can be located by different masters and different masters are located in different locations according to the data type.

    So I think Japan (That's where they just dropped their Asia - US cable after all, so it makes sense) has a "complete" replication of all Google data. Some data is also replicated to containers (YouTube etc) for hosting at major ISPs. So all email data would be replicated in non-realtime. If you request something that isn't in that DC it's located in the US or wherever is closest (I guess).

    There are multiple "complete" copies on the east and west coast as well as European hub sites or directly connected to European hub sites.

    If you ask for a citation, I can dig something up for you....

    --
    Curiosity was framed; ignorance killed the cat. -- Author unknown
  5. Potential support issues by dave562 · · Score: 4, Interesting

    I was considering a GAPE deployment for a much smaller organization (about 150 users) and ran into real problems finding answers to some questions. In my particular case I was considering a migration off of Exchange. The exact specifics involved were really vague and often times the suggestion was, "Talk to a solutions provider." I went ahead and talked to two of them. When I pressed them for specifics about GAPE replication of Exchange features (Public Folders for example), I got a lot of vague answers along the lines of either, A. "Well, it can kind of do that." or B. "You don't need to do that because the Google way is better."

    The major consideration that turned me away from Google was their support (or seeming complete lack of it). I had a terrible time getting my pre-sales questions answered when I went directly to Google. The "premiere partners" (companies that are trying to make a business based on deploying GAPE for organizations) were just as vague. One of them even admitted to me that they have problems getting answers out of Google about new features, or the status of outstanding issues.

    I am subscribed to a thread on Google's forums that details people's real world problems with Google support.

    http://www.google.com/support/forum/p/Google+Apps/thread?hl=en&tid=384dd0d72db87c6d

    Some of the people are obviously idiots who can't read the documentation. The large majority of them have serious problems that are ignored. Just recently someone mentioned that Google quoted them 5 days to recover an accidently deleted mailbox.

    I don't doubt that Google Apps could very well be a great product. The key is that it "could" be a great product. Great products require great support. Great products require a certain ease of implementation and use. As it stands currently, GAPE is more like a beta framework that requires a lot of heavy lifting on the part of an IT department. It is hardly a production ready, polished product that can be sold as a service.

    1. Re:Potential support issues by m93 · · Score: 2, Interesting

      What you outline here makes me think that Microsoft will have an edge in cloud based email. Say what you will about MS, but they do have tremendous support resources from their company on down to solutions providers. If they are successful in putting exchange in the cloud, it will have a lot to do with them taking advantage of the current old-school knowledge base. I couldn't imagine Google trying to port my company's (complicated but works well) exchange system over to Gmail. It would be a nightmare.

    2. Re:Potential support issues by Sycraft-fu · · Score: 2, Insightful

      I think the problem is that Google is trying to get in to a new kind of market and they aren't ready for it. They are used to providing free, no tech support kind of services. You access their site and do what you want, but if you can't figure it out, too bad, there's no number to call. Everything is very much a system where they internally decide what to provide, put it out there and see what people do with it.

      Fine for free web services, not fine for businesses. Businesses have specific needs for their enterprise applications and are going to expect them to be met, especially when there's money involved. That's going to necessitate having a support staff on hand to address that, and that the staff has the power to talk to the devs and so on if changes need to be made.

      Google is toying in a new market, but they really aren't ready for it.

  6. Re:Easy solution by BarryJacobsen · · Score: 2, Funny

    I mean you really think they keep a server in the Vatican or Swaziland?

    Of course not! Those two were on the list :P

  7. Re:Easy solution by pushing-robot · · Score: 2, Funny

    Google definitely doesn't run servers in catacombs deep beneath the Vatican. The rumors are completely false that they could have a distributed storage system hidden in the endless mists of Angel Falls. And it would be utterly absurd to think they maintain a datacenter at the L2 point 1.1 million kilometers beyond the Moon.

    --
    How can I believe you when you tell me what I don't want to hear?
  8. Re:Easy solution by Applekid · · Score: 3, Insightful

    There is no fucking way there are google servers in 190 some odd countries.

    The cliche IT answer to "Where does your cloud store data?" is "Why do you want to know?" And it is with good reason.

    Are you trying to avoid embargoed countries? The list of places it will not be stored should be pretty good. Are you trying to avoid a specific country? Again, the list of places it will not be stored will reveal enough.

    If your customer (in this case, Yale would be Google's potential customer) wants data stored in a specific country, they gotta ask why instead of just caving. If you care WHERE your data is stored, then you don't really want Cloud storage. And I'm pretty sure Google would like to reserve the right to have servers in the Vatican if they got a sweet deal there.

    This is kind customers with non-functional requirements ("you should use SQL Server, I saw an ad in InformationWeek magazine that says it costs less in the long run!").

    --
    More Twoson than Cupertino
  9. Re:RAID by pushing-robot · · Score: 4, Funny

    Only half the bits are on one server vs. another

    While this is of course theoretical, if you put all the "zero" bits on one server and the "one" bits on another, you could also achieve fantastic compression ratios.

    Come to think of it, this gives me a great idea for a defragmentation program...

    --
    How can I believe you when you tell me what I don't want to hear?
  10. Re:Easy solution by cmiller173 · · Score: 2, Funny

    ...yet.

  11. Finally some common sense by oldhack · · Score: 2, Insightful

    It would be pathetic if Yale, one of the richest schools, can't spare some fund to maintain its own email system. Tuition there is, what, approaching 40k a year?

    --
    Fuck systemd. Fuck Redhat. Fuck Soylent, too. Wait, scratch the last one.
  12. Re:Easy solution by unix1 · · Score: 5, Insightful

    There is no fucking way there are google servers in 190 some odd countries.

    The cliche IT answer to "Where does your cloud store data?" is "Why do you want to know?" And it is with good reason.

    The answer is NOYB (none of your business) and it is with good reason. Even though Google provides the service, the data belongs to the customer, i.e. Yale. It is in Yale's discretion where they want to store their data and what reasons they are willing to give out to 3rd parties for doing so.

    However, I'll give you a good reason. If Google can guarantee that the data will be stored in certain countries (or even offer an option for an extra fee or whatever), then it will satisfy Yale's comfort level with respect to the privacy and legality of their data.

    For example, for argument's sake, if Google could guarantee the data would only stay in the U.S. Yale would be well aware of the legal process and rights with regard to their data. However, this may not be the case in other countries such as China, Iran, Italy, Indonesia, etc.. I bet there are plenty of Chinese students studying at Yale, and there are professors of Chinese descent who then would be exposed if the data is stored in China. If Chinese government gets access to their communication and determines it needs to put certain individuals on their watch list based on their views on free speech, human rights, government, etc. they will risk being detained and jailed next time they travel home to visit relatives or after they finish school. It is in Yale's interest to protect their faculty and students from such threats.

    And, from no reasonable perspective, does Yale have to come out and state to any 3rd party, including Google, that so and so is a member of their faculty and they have a concern that that person's communication is stored in such and such countries then they may have a problem. It's NOYB.

    On the other hand, why doesn't Google provide an additional service to their clients where they, the clients, get to pick the countries to which their data could potentially be replicated? It seems like a feature that their clients (companies, universities, governments, etc.) would very likely pay extra for; especially considering Google's own recent encounters with Chinese and Italian governments.

  13. Some good concerns, but mostly FUD/ignorance by anderiv · · Score: 3, Informative

    We're going through this same conversation at my employer (a higher-ed liberal arts university). This article came up yesterday in my team, and we had a bit of a discussion about it. Here's the email I sent out to the group about the article and Yale's decision. Hopefully this will help to clear up some of the misinformation in the article.

    > Several members of the committee thought ITS had made the decision
    > to move to Gmail too quickly and without University approval, Fischer
    > said.

    Well yah, of course that's going to be a problem.

    > Google stores every piece of data in three centers randomly chosen
    > from the many it operates worldwide in order to guard the company’s
    > ability to recover lost information — but that also makes the data
    > subject to the vagaries of foreign laws and governments"

    Several other schools have fought this fight with Google and have gotten
    them to agree that all of their data will stay in the country.

    > Under the proposed switch, Yale might lose control over its data

    No, No, No. Google makes it very clear to its customers that the data is
    always "owned" by the customer.

    > or could seem to endorse Google corporate policy and the large
    > carbon footprint left by the company’s massive data centers

    For many years, Google has been a pioneer in building efficient, green
    datacenters. I guarantee you that proportionally-speaking, Yale's
    segment of Google's network has a *much* smaller carbon footprint than
    Yale's self-hosted system.

  14. Anyone else done this, comments? by AbRASiON · · Score: 2, Interesting

    I'm considering doing this for a small business I support.

    It's about 15 users and they currently run exchange, I'm tired of supporting it and frankly too lazy, people keep suggesting google handling the mail.
    I've set up a test domain and used Outlook and Thunderbird to connect to it via IMAP (that's the right way to do it, right?)

    I'm in Australia on ADSL2 links, 20mbit and 16mbit are the 2 I've tested from, the performance seems 'laggy' and I'm curious what the cache implimentation of Outlook 2007 is like?
    I want the users experience to be very close to what they get with exchange or at least comparable.

    The users have huge mailboxes (most of their work is email - a LOT of communications) so they need massive mailboxes - the smallest is 1gb and some of them have them in the 15gb range. (Please, please don't tell me 'you're doing it wrong' or 'users need to be trained to XYZ' - this is how they work, this works for them and helps them get stuff done better, it needs to be this way)
    Now the first major issue, besides the lag on IMAP is the folder limitation google have in place. I can create folders and subfolders and more subfolders but the path depth for the folders is quite shallow compared to an outlook PST. This is due to 'folders' being implimented via tags on gmail :/ Does anyone know a way around this or plans for it to change?
    I agree the users shouldn't have ridiculous folder depth but they really do need fairly extensive folder information
    \name of project\name of company\name of person\ for example is pretty difficult to do via IMAP Gmail :/

    Anyone else have some overall general comments about moving to externally hosted mail with google (or someone else?)