Educause Security Discussion mailing list archives

Re: Gmail for students and IMAP


From: Joel Rosenblatt <joel () COLUMBIA EDU>
Date: Wed, 29 Jul 2009 13:18:18 -0400

Hi Jeff,

Actually, you bring up an interesting question.  The reason that I get a micky.mouse () gmail com address and do it using 
TOR is because I don't want anyone to
easily trace it back to me - so a blanket subpoena for anyone who mentions "marijuana" or, more likely, "bomb" in a 
mail message going through Google would not
yield a lot of easily identifiable material - but when you have large population of gmail accounts easily tied to real 
identities, it may become much more
attractive to go on wholesale fishing expeditions.

Just because your paranoid, doesn't mean they're NOT after you :-)

My (paranoid) 2 cents.

Joel

--On Wednesday, July 29, 2009 12:24 PM -0400 "Jeffrey I. Schiller" <jis () mit edu> wrote:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wed, Jul 29, 2009 at 10:17:15AM -0400, Joel Rosenblatt wrote:
I have a question - has anyone had to do a "data discovery subpoena"
for a student that has their email outsourced?  What was the process
and how much cooperation did you get from the vendor?

A more interesting question is what happens when Google is served a
subpoena with wording like "All E-mail for students of University X
where the word 'marijuana' is found in a mail message. Also, do not
inform anyone of the existence of this subpoena, including the
University administration."

Presumably if they choose to fight such a subpoena, it will be on
their nickel, as they cannot alert you to the existence of such a
subpoena, so cannot pass on the costs. At some point it is just easier
for them to just pass on the information... and given their powerful
search engine technology, it should be pretty easy for them to do
this.

                        -Jeff

- --
========================================================================
Jeffrey I. Schiller
MIT Network Manager
Information Services and Technology
Massachusetts Institute of Technology
77 Massachusetts Avenue  Room W92-190
Cambridge, MA 02139-4307
617.253.0161 - Voice
jis () mit edu
========================================================================
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD8DBQFKcHe/8CBzV/QUlSsRAvbcAJ4vhOoR/s3oI2El2tnPv5f4eilb6ACdG5dB
1szJeyNqubOprst97AS38c8=
=j1Ko
-----END PGP SIGNATURE-----




Joel Rosenblatt, Manager Network & Computer Security
Columbia Information Security Office (CISO)
Columbia University, 612 W 115th Street, NY, NY 10025 / 212 854 3033
http://www.columbia.edu/~joel

Current thread: