3 ms·

I read it some time ago. In the case above, it had to be brought to google's attention and so I would say the logging and monitoring is not invincible. Who poli

I read it some time ago. In the case above, it had to be brought to google's attention and so I would say the logging and monitoring is not invincible. Who polices your log access monitors? I understand that gmail is somewhat distributed and policing remote sites in poorer areas is problematic - especially if one were to consider how much easier it would be to persuade google employees in those areas, should gmail/g+ be offshored in the future. Should have elaborated: I'm not sure if a civil/criminal proceeding arose out of the case above.

mvgoogler 15y ago
"In the case above, it had to be brought to google's attention and so I would say the logging and monitoring is not invincible." The answer is right in the blurb that I posted: "...for example, we are significantly increasing the amount of time we spend auditing our logs to ensure those controls are effective..." In other words, this incident pointed out a weakness in the system and it is being addressed. From personal experience I can tell you that it is - in fact - being addressed and more controls and monitoring have been rolled out and more are being rolled out. I don't feel comfortable going into details, but from the perspective of a working engineer I have both had conversations about this with senior VPs and have had to do work to comply with the new controls (and have more work planned in the upcoming quarter to be compatible with upcoming controls that are even stronger).