undefined | Better HN

0 pointscharcircuit2mo ago0 comments

>You cannot have an "only the good guys" backdoor.

So what? If I store a document in a private Google doc. I know that technically a Google employee could read it if they really wanted to, but the policies, security, and culture in place make it have a 0% of happening. It's possible to design proper access systems where random people are not able to come in and utilize that access.

0 comments

observationist2mo ago

So you think there's no Google employees with privileged access gooning on private images, stalking, selling access, disrupting individuals, etc?

Schmidt notoriously had a backdoor, and I'd be far more shocked if executives did not have backdoor access and know all the workarounds and conditions in which they have unaccountable, admin visibility into any data they might want to access.

These are human beings, not diligent, intrepid champions of moral clarity with pristine principles.

happyopossum2mo ago

Google employees with access? Yes. Google employees without audited and multiple levels of approval? No. I can tell you there are not.

Any Eng at Google can read the entire codebase for gdrive, if there were backdoors it would become public knowledge very quickly.

the-rc2mo ago

What's this notorious backdoor?

bigyabai2mo ago

> It's possible to design proper access systems where random people are not able to come in and utilize that access.

How quickly "Hacker" News forgets Snowden.

wang_li2mo ago

>I know that technically a Google employee could read it if they really wanted to, but the policies, security, and culture in place make it have a 0% of happening.

We know it's non-zero as they have already had occasions when it has happened that Google employees used their access to stalk teenagers.

charcircuitOP2mo ago

And such access kicked off an internal investigation and got him fired. Privacy is taken seriously.

wang_li2mo ago

>And such access kicked off an internal investigation and got him fired. Privacy is taken seriously.

The complaints of the victim's parents kicked off an internal investigation, months later. It's not like google found this and took care of it on their own. Also, it has happened before too.

charcircuitOP2mo ago

Google's internal privacy controls and monitoring are much stronger today than when that happened.

jtbayly2mo ago

This is such a backwards take. You are ignoring that the system you cite as evidence that secure systems with backdoors can be designed and protected from random access has not been perfectly protected.

And you say it's stronger now.

Ok, so which country or neighbor is going to be the one to hack our national encryption system with a back door the first time? The second time? The third time? Before we manage to get it right (which we never will), what damage will be done by the backdoor? Probably something like Salt Typhoon, which you also conveniently ignore as a counterfactual to your claim.

charcircuitOP2mo ago

It not being perfectly protected is by design. Security comes with trade offs.

>Before we manage to get it right (which we never will)

Keep in mind that modern encryption isn't perfect either. You can just guess the key and then decrypt a message. In practice if you make the walls high enough (requiring a ton of guesses) than it can be good enough to keep things secure.

hulitu2mo ago

> Privacy is taken seriously.

With bug fixes and performance improvements ? Your privacy is very important for us, that's why we collect it all.

j / k navigate · click thread line to collapse

0 comments

observationist2mo ago

So you think there's no Google employees with privileged access gooning on private images, stalking, selling access, disrupting individuals, etc?

These are human beings, not diligent, intrepid champions of moral clarity with pristine principles.

happyopossum2mo ago

Google employees with access? Yes. Google employees without audited and multiple levels of approval? No. I can tell you there are not.

Any Eng at Google can read the entire codebase for gdrive, if there were backdoors it would become public knowledge very quickly.

the-rc2mo ago

What's this notorious backdoor?

bigyabai2mo ago

> It's possible to design proper access systems where random people are not able to come in and utilize that access.

How quickly "Hacker" News forgets Snowden.

wang_li2mo ago

>I know that technically a Google employee could read it if they really wanted to, but the policies, security, and culture in place make it have a 0% of happening.

We know it's non-zero as they have already had occasions when it has happened that Google employees used their access to stalk teenagers.

charcircuitOP2mo ago

And such access kicked off an internal investigation and got him fired. Privacy is taken seriously.

wang_li2mo ago

>And such access kicked off an internal investigation and got him fired. Privacy is taken seriously.

The complaints of the victim's parents kicked off an internal investigation, months later. It's not like google found this and took care of it on their own. Also, it has happened before too.

charcircuitOP2mo ago

Google's internal privacy controls and monitoring are much stronger today than when that happened.

jtbayly2mo ago

And you say it's stronger now.

charcircuitOP2mo ago

It not being perfectly protected is by design. Security comes with trade offs.

>Before we manage to get it right (which we never will)

hulitu2mo ago

> Privacy is taken seriously.

With bug fixes and performance improvements ? Your privacy is very important for us, that's why we collect it all.

j / k navigate · click thread line to collapse