Slashdot Mirror
Does Gmail's New 'Confidential Mode' Make It Easier to Phish? (vortex.com)
Gmail's new confidential mode lets its users create "expiration dates" for emails, or require recipients to provide an SMS passcode. (And Google also claims they've removed the option to forward, copy, download or print messages.)
But Slashdot reader Lauren Weinstein warns that Google is also opening up a new vector for phishing emails: The problem arises since non-Gmail users cannot directly receive Gmail confidential mode messages. Instead...when a Gmail user wants to send a non-Gmail user such a message, the non-Gmail user is instead sent a link, that when clicked takes them to Google's servers where they can read the confidential mode message in their browser.
The potential risks for any service that operates in this way are obvious. Those of us working on Internet security and privacy have literally spent many years attempting to train users to avoid clicking on "to read the message, click here" links in emails that they receive. Criminals have simply become too adept at creating fraudulent emails that lead to phishing and malware sites.
But Slashdot reader Lauren Weinstein warns that Google is also opening up a new vector for phishing emails: The problem arises since non-Gmail users cannot directly receive Gmail confidential mode messages. Instead...when a Gmail user wants to send a non-Gmail user such a message, the non-Gmail user is instead sent a link, that when clicked takes them to Google's servers where they can read the confidential mode message in their browser.
The potential risks for any service that operates in this way are obvious. Those of us working on Internet security and privacy have literally spent many years attempting to train users to avoid clicking on "to read the message, click here" links in emails that they receive. Criminals have simply become too adept at creating fraudulent emails that lead to phishing and malware sites.
And Google also claims they've removed the option to forward, copy, download or print messages.)
So then you just print screen or take a picture of the email and then just transcribe it?
"Those of us working on Internet security and privacy have literally spent many years attempting to train users to"
So... tell me your success stories.
...gis sdrawkcab (usually not responding to ACs; don't bother posting as AC)
What about those of us without a freakin' cellphone? Or without any text messaging plan?
If your users are trained to not click on the links then the service will fail because nobody gets the message. Do you have it out for anything google? It's always something.
LITERALLY!
Now, where can I get these years to spend? Lauren. A girl? A guy with a girl's name? LITERALLY!
Yes. It'll make it incredibly simple to fish not only Gmail "users", but also people who receive email from Gmail "users". If this is implemented, I'll just set our mail servers to send all of these messages straight to the trash.
I don't respond to AC's.
Like:
https://breakdev.org/evilginx-advanced-phishing-with-two-factor-authentication-bypass/
"Victim clicks the link...enters his/her valid account credentials, progresses through two-factor authentication challenge"
Nothing new here.
Take it from Google Asshole Shawn Willden, aka Shillden, phishing must be a Really Good Thing, since GMail facilitates it.
has to ad.
So the service links have to stay deep in their free networks to ensure the encrypted ads get seen by consumers.
Domestic spying is now "Benign Information Gathering"
Microsoft has had this service for awhile: confidential and expiring email. If you’ve done a loan or bought house in the last two years, you may have encountered it. Usually the loan or escrow company calls me ahead and tell me to expect it. So the best practice for these type of emails would be don’t click unless you’re expecting it.
Google has invented a new way to send emails that you'll never know whether anyone will actually read it!
This is at least the second " Slashdot reader Lauren Weinstein " story in as many days.
Both have been some kind of speculative ... stuff.
So, what's the deal? Why is she (or "she" - have you actually met her?) the new Jon Katz?
Nuff said.
google what?
Everyone in the world should just use Gmail then. Duh!
Cheers
L. Page & S.Brin
Google must know that there is such a thing as a camera and at the moment the email is read from a screen. Any one who wants to forward it will just take a picture(s) / video and forward it along.
The most odd part is that non-gmail users would not be able to read these messages. That sounds less like email and more like a Google Garden to me!
Whom ever hatched this idea is a little bit ahead of themselves. Maybe when you have google nano particles in your Brain and you have the incoming message beamed into your eyes, then this may make sense. However, even then there will probably be some hack to make forwarding a copy possible (even if it illegal).
I can see the use of this if your company is using Google Apps (avoid accidental forwarding of confidential information). But beyond that it really makes very little sense.
I saw this long ago on other security sites. Weinstein's stealing others' material claiming it as his own.
How does this work if you use POP (or IMAP) to get your messages from Gmail using, say, Thunderbird? If I get a link, I imagine I'll either ignore confidential mode messages or send a reply asking the sender to not be a dick and try again.
It must have been something you assimilated. . . .
This Confidential Mode "feature" seems problematic and/or just a way to force people to interact with your servers. It adds a non-standard operational mode to Email and will cause problems and security concerns (like the aforementioned Phishing concern) for people who use email clients, like Thunderbird, with POP / IMAP to access their email -- not everyone likes using a browser (or your mobile app) for email. Stop making things unnecessarily complicated. If you're committed to supporting this impending dumpster-fire, please add a way for people using regular Gmail accounts to specify that they don't want to receive Confidential Mode messages.
To summarize: Dumb, Do Not Want
It must have been something you assimilated. . . .
So Google will send non-Gmail users (and presumably Gmail users using POP/IMAP) an email containing a link to the actual confidential email. But the first rule in *every* spam and anti-phishing training course -- which people are routinely required to take at work (I know I was) -- is: Don't click on links in email messages. Nice going Google.
It must have been something you assimilated. . . .
No, I don't want magic emails from idiots.
Why does Slashdot continue to publish submissions from well-known fascist, vigorous enemy of free speech, and shameless Google shill Lauren Weinstein?
Good work, Billy! $0.50 has been deposited in your Shareblue account.
This is just one more attempt at slowly killing mail.
Mail, as a decentral thing, pisses off the biggies, who would rather see their users jailed up in their respective silos.
Listen, Google, Microsoft, Apple, Fakebook et al: you are parasites. Humankind doesn't need you and would be better off without you.
I definitely will not install a Google email client. I will use an email client of my choice.
Anyway I am not actively using gmail.
Don't click on links in emails. If someone sends you such a bullshit email, report it as spam.
Now if the sender wants to use "confidential" mode on email to you (apparently regardless if you have gmail or other account), he has to provide Google your phone number so that SMS passcode can be sent.
Clever marketing people just bought a bunchload of useful private information input by "Mechanical Turks" paid with "security". As already pointed out many times here it is painfully easy to screenshot those "confidential" emails and to forward them as picture files.
Also why is Google trying to re-invent PGP and S/MIME, badly ?
These already work nicely for confidential information :
only the person holding a private key for which a message was encrypted can every see the actual message.
If an encrypted message ends up in the wrong hands, that mistaken destinary will NOT be able to open it anyway due not missing the private key.
The only difference is that a *decrypted* message could be copied-and-pasted from and a user could end up repackaging the information in another (non encrypted) message.
Whereas here, GMail's confidential mode pretends to do something to prevent copy-paste and printing... and in practice is completely failing at it just as suggested.
You cannot trust somebody else's computer to do what you want to do. No matter how much clever javascript you put into your stupid stuff, at best you're still vulnerable to good old "analog hole" (i.e.: take a picture with a camera as suggested), at worse the target browser can be told to ignore any anti-printing hooks (e.g.: just hold "shift" while right-clicking, you'll get the default browser alt menu, no mater what the javascript tries to overload).
The only thing that you can trust is that, thanks to correctly executed cryptography, your message reaches its intended destination without any unwanted 3rd party able to peer along the way. Once the intended person has de-crypted it, you cannot control anything.
PGP (such as GPG, EnigMail Thunderbid plugin, Mailvelope browser plugin, etc.) and S/MIME have solved this a long time ago (with difference in the way trust is handled)
No need for google to invent a poorer solution... Oh yes, I get it. Current working solution happen to *also* prevent Google from peering into your e-mail, so they cannot contextualize and get less efficient at selling your eyeballs to advertisers, and earn less money. That's why they need a poorer solution than PGP and S/MIME.
"Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
Google already detects phishing emails and will most likely detect any pretending to be one of its own. But I have news from the year 2018... I get emails with links ALL THE TIME: Amazon suggestions and offers, gift cards, social network notifications, security advisories, updates from services I'm a customer of, etc. So if you want to prevent users from clicking on links received by email you already lost that battle.
As a Slashdot discussion grows longer, the probability of an analogy involving cars approaches one.
Everyone should immediately delete the notifications, rather than worry about whether or not they're phishing attempts.
I don't click links - that's how all spam comes. We've spent years teaching people "don't click Links in email - even if it comes from a friend -- it might be phishing"
Therefore - many people will look at these emails with suspicion and recall "don't click the link" -- thus turning this product feature into Allo. Did anyone click the SMS link when a friend sent you a message?! nope. Dead product.
of course my personal demographic probably won't use this feature anyhow. As Mark Z (sort-of) said, "If you aren't doing anything wrong, what do you have to hide?"
Bill Gates would like to send you a message - please click this link to win free money!!
The only question in my mind was which crimes did Google intend to make easier to hide with this new feature. My guess is it was intended to make corporate crimes easier to hide, and that making phishing easier was just a side effect.
I think we've pushed this "anyone can grow up to be president" thing too far.