Storm on Google, third-party app developers can read your email. Here's how to defend yourself



[ad_1]

There is someone who reads your emails sent via Gmail. They are the developers of third-party applications: those who, for example, compare prices, automatically plan travel itineraries or organize our mail. We installed them, thinking that they were doing a bargain. Too bad that those who work there have access to our messages, in full, and no scruples. They call it "a dirty secret". But it's a very controversial practice, as common and confirmed by Google itself.

How surprising is it? Many third-party applications are developed by small businesses that do not have a process / technology in place to securely debug. You authorize the application, you trust the company that develops this application. In addition, G has no control (excluding conditions of service)

– Luca Carettoni (@lucacarettoni) July 4, 2018

The first to tell the story. history was Wall Street Journal he learned the case directly from the officials. In fact, the American newspaper has maintained with several companies offering these services, whose employees have admitted to read thousands of texts and then make good use of the company. This is the case of the software Edison, a company that offers a mobile application to organize mail: he admitted to having scanned emails to develop a new service. Or eData Source Inc, which deals with the badysis of data: it has improved its algorithms, naturally only after scanning the mail of its users, to understand what needed to be changed.

On the one hand, this should not come as a surprise, as explained Luca Carettoni an expert in information security. Because many of these applications are developed by small businesses that do not have the technology to debug, that is, to identify and fix software errors, or simply to improve them. . They compensate for this lack, sneaking into our lives. And we allow them when we accept the famous "Terms and Conditions". On the other hand, the devil is still in the details since these clauses are buried between the lines. Alan Woodward of the University of Surrey pointed BBC that we could spend whole weeks reading them. And the fact that an external company can see the content of the message escapes human understanding. In practice, something we would never have thought of. Instead, it happens.

The news has triggered a storm around Google because of the freedom it leaves to those who exploit its programming interfaces (APIs), allowing indiscriminate review of the entire text of emails. A charge that comes at a particularly difficult time for Mountain View, owner of the largest existing email service, which has 1.4 billion users. In Europe, the new privacy regulations (Gdpr) require that they do more to protect users and be more transparent about access to their data. And the Cambridge Analytica scandal, which has seen the information of more than 80 million Facebook users run by a political consulting firm, has increased sensitivity on these issues.

For his part, Big G – who no longer reads mail from users for advertising purposes – defends himself by referring to the policies of the developers he adopted, in which there is fear of suspending the possibility of To access the Bees in case of "hidden functions, services or actions inconsistent with the commercial purpose" of the application. And invite users to visit the Security Review page to see which apps are connected to our account and which ones we do not want to share with.

[ad_2]
Source link