12 ms·

Why do self-respecting hackers use Gmail & Co?

• jmsduran 15y ago
  The article presents a fair argument, but the title is obviously flame bait. Granted, I myself thought of setting up my own mail server, but the disadvantages quickly outweighed the benefits. If your argument is sheer privacy, unless you are hosting your mail on a physical machine at your house connected to your home ISP (which is pretty dumb if you want ~100% uptime), you will most likely either use a VPS or managed system under the control of yet another company, which privacy-wise is the equivalent of using Gmail anyway. I'm sure setting up your own hobby mail server would be pretty fun and provide great deals of experience, but if you are doing so simply for data privacy or better up time, your point is moot, and you will probably be better off just using a provider like Google.
• methodin 15y ago
  I don't quite understand the constant articles about someone who is thumbing their nose at the "other idiots" who don't care about privacy. Is it not common knowledge that even if you never set foot online your private information has long been dispersed and used for much more than it ever should? We all should be more concerned with the places that we enter information that does not disclose how it is used in a friendly online location (banks, products, doctors office, grocery store etc...).
• mohene1 15y ago
  I think I might switch over my email accounts, but there is also an issue of how long will these services be around for. I had an Altavista account until they closed their email service. So, I need a reliable provider that wont be swallowed up by a bigger company and change my email address.
  • ojilles 15y ago
    Get your own domain?
    • deleted 15y ago
      [deleted]
      • ghshephard 15y ago
        I'm not sure about the "more professional" comment - gordon@shephard.org looks fine to my eyes. Regardless, lots more useful shorter domains than that are available - for example, mohene.{com,net,org} all appear to be available.
      • batista 15y ago
        Nothing of the kind is considered by anyone. Nobody considers johnsmith@odek.com a better applicant than johnsmith@lumberjackservices.com. Even if the job is for a hacker and not a lumberjack.
      • mohene1 15y ago
        Okay, I understand.
      • tedunangst 15y ago
        The username part matters a lot more than the domain. ladykilla69@gmail.com isn't a particularly professional email, even if it does have a well known domain.
• kev009 15y ago
  It obviously boils down to "good enough" and "free enough" but I've planned on moving back to Postfix/Dovecot at home for the reasons outlined, just a time thing.
  • eschulte 15y ago
    I've been thinking of doing this myself as I've heard great things about Dovecot. An ideal setup for me would be a VM hosted somewhere in the cloud (presumably my hosted VM can't be warrently searched in the same way as email), running a barebones Arch+Postfix/Dovecot. The only inhibitors are cost of hosting and time of setup, if anyone has information on either good hosting solutions or setup information I think it would be a useful addition to this thread. Note: These instructions look fairly straightforward. http://www.howtoforge.com/arch-linux-mailserver-with-postfix-and-dovecot http://www.howtoforge.com/arch-linux-mailserver-with-postfix...
    • kev009 15y ago
      Running out of the home may be seem a bit asinine but the home is still somewhat sacred with respect to search warrants in the US and moving email around is insanely fast if you work out of the home. Of course you'll likely need a business class connection with static IP and configurable rDNS and no port 25 block so not everyone will be lucky enough to be able to do it. But something like a plug computer will keep the cost pretty reasonable if you don't currently have a home server and for me it's cheaper than a VPS + consumer cable connection.
• sliverstorm 15y ago
  For a while now, I have used GMail purely as a drop box from which I fetch my mail (and delete from my account). I'm hoping once the Raspberry Pi is released, I can get a good personal mail server going again.
• emu 15y ago
  This article is link-bait, but I'll bite. Simply put, Gmail provides a compelling user experience: * fast and accurate search. This is key, and I don't know of a single desktop email client that even comes close to providing a decent search feature. Decent here means "answer full-text queries accurately within a second or so". I didn't realize how useful this was until switching to Gmail; now I have it, I can't switch back. I don't even bother organizing my email more than a minimal amount any more, I just search for things when I need them. * remote access is also key. I regularly access the internet from at least 4 different devices, on at least 3 different operating systems. Sometimes I do so while traveling. Gmail makes this convenient --- all I need is a web browser. IMAP need not apply --- I found IMAP appallingly slow last time I tried it.
  • dangrossman 15y ago
    I use Rackspace Email, over IMAP on the desktop, IMAP on my phone, and webmail when on someone else's computer. It's never slow in any way. When I sign up for things, I hear the ding of the confirmation e-mail within 2-3 seconds of submitting the form -- fast as push mail.
    • sdkmvx 15y ago
      It's using IMAP IDLE (https://en.wikipedia.org/wiki/IMAP_IDLE https://en.wikipedia.org/wiki/IMAP_IDLE), which is push email.
  • gala8y 15y ago
    > This is key, and I don't know of a single desktop email client that even comes close to providing a decent search feature. I used to use Opera M2 built-in client and think it's even faster than Gmail web UI and very accurate.
  • nknight 15y ago
    > This article is link-bait You should probably check out who Harald Welte is and what he does before making such accusations. I don't agree with him here, but "link bait" this is not.
  • 15y ago
• aiurtourist 15y ago
  So why is there such a high degree of Gmail usage among those groups? Because we're lazy. you give away control over your personal data Yes, and if my data disappeared tomorrow, I'd be pretty pissed off. But since Gmail has a sort of critical mass, it would be likely that other people would lose data too. Lots of pissed off users would tarnish Google's reputation and it's in their interest to avoid that. you put your personal data within the U.S. jurisdiction A lot more than my email is within that jurisdiction and is much more important -- like my money, family, and possessions. Besides, I'm a hacker. If I want to send something sensitive, I'll be smarter than sending it over SMTP and logging it via Gmail. you give Google not only the social web information who mails whom, but also the full content of that communication Yep, they data-mine my email anonymously, but they try to not be evil about it. There are much more nefarious groups tracking my behavior, too. Besides, the group effort cuts down spam.
  • there 15y ago
    Yes, and if my data disappeared tomorrow, I'd be pretty pissed off. But since Gmail has a sort of critical mass, it would be likely that other people would lose data too. You're picturing some massive server failure, but not the more likely case of your Google account being disabled for any random reason, which has happened to more than a few people. As Gmail gains more users, you become that much less important to them.
    • jakeonthemove 15y ago
      Something like that happened to me - my account (everything, not only Gmail) was suddenly inaccessible. However, a quick email to support and within 12 hours they sent me a link where I entered three emails I wrote to recently... that's it, password reset, account reactivated... I think they're getting better at handling these situations.
    • emu 15y ago
      Back up your email! Just because your data is in the cloud doesn't mean you shouldn't make a backup. I just run getmail which retrieves mail via Gmail's IMAP interface every now and then. If Gmail went away tomorrow, I wouldn't be _that_ sad.
• seanalltogether 15y ago
  Honestly at the end of the day it comes down to spam control for me. I'm done trying to configure adaptive spam filters or finding the latest spam list to scan against. Its not worth my time to deal with that anymore.
• nixle 15y ago
  Lot's of space Great spam filter that catches 100,04% of spam ( 0.04% non-spam) Easy and fast search options Integration with calander, docs View and save PDF, DOC, XLS, from within browser Great interface Good apps for Iphone, Android, Ipad Some nice integration options with Chrome browser Sign in at lost of places with your gmail account (stack overflow much?) I don't have to spell out the provider g.m.a.i.l. when I say my address to somebody.
• batista 15y ago
  Because we could fu*n care less about what web mail provider we use, and Gmail is comfortable enough.
• callumjones 15y ago
  Because the last thing I want to do is worry about managing my mail server, I have better things to do that ensure that have spam and webmail configured as nicely as Gmail.
• scotu 15y ago
  Because email sucks. Hosting email sucks. Email clients suck. (Bonus: email spam sucks). On Gmail it sucks a bit less. I'm sorry for myself in the first place, but until I can code my dream of an email killer (or email client fwiw) that does not suck, avoid making my eyes bleed (and make it a success...) I can't avoid gmail.
• nabilt 15y ago
  Funny. I just asked for alternatives to Gmail and other hosted software on the Richard Stallman post http://news.ycombinator.com/item?id=3551345 http://news.ycombinator.com/item?id=3551345 Harald's suggestions boil down to - share the administrative and financial effort with friends - use hosting form NGOs or non-profits - use small companies and ISPs The first suggestions might work for me, but what does everyone else use? If you host your own what software? Lastly, what do you think of a home appliance (basically a server the size of a router with a web interface) that people could install in their home to host some of their important data. Obviously it wouldn't be reliable enough for Email, but might be good enough for docs, password hosting, bookmarks, contact list, etc...
  • chc 15y ago
    A device that sits in your home and hosts your docs, passwords, bookmarks, contact list, and so on? It sounds like you've reinvented the PC.
    • nabilt 15y ago
      Well I should have clarified. I want an always on low power appliance with an easy web interface to host important data for people that are not capable or too lazy to set up a server.
      • statenjason 15y ago
        I purchased a SheevaPlug[1] a couple years ago. It's a plug sized ARM server consuming 5W max. It's been great for a low-power, always-on debian server. For the lazy or not capable user, there is the Pogo Plug[2], which was prototyped using the Sheeva. You plug in ethernet and a usb hard drive, and it gives you access from the PogoPlug site. [1]: http://www.globalscaletechnologies.com/p-22-sheevaplug-dev-kit-us.aspx http://www.globalscaletechnologies.com/p-22-sheevaplug-dev-k... [2]: https://pogoplug.com/devices https://pogoplug.com/devices
  • GnarlinBrando 15y ago
    Plug servers. Google it. Marvell ARM chips mostly. I have been thinking about trying to build a little turnkey linux OS to run on those things that can provide similar functionality to what you are talking about. Alas the technology does not seem to be quite there yet and the work required to get basically a full personally hosted webapp suite is not trivial. That said, I think in the future we will see a lot more 'appliances' that run as VMs or on low cost low power all ways on hardware. Backed by a business model something like wordpress. Meaning that there is a dot com where you can get it remotely hosted for you, and there is a dot org where you can download and host the app yourself. Plus stuff like the personal router project http://pr.lcs.mit.edu/ http://pr.lcs.mit.edu/ would make a pretty interesting paradigm change.
• lukev 15y ago
  1. Rich webmail is an absolute must for me. I use too many different computers from too many different places for anything else to be remotely practical at this point. 2. No open source webmail servers that I've seen come close to Gmail's functionality, and I don't have time to write one that is. 3. Even if there was/I did, I couldn't get the spam filtering to anything like Google's level even in theory since I don't have nearly as much data to work on.
  • pavel_lishin 15y ago
    > 2. No open source webmail servers that I've seen come close to Gmail's functionality, and I don't have time to write one that is. Obligatory comment pointing out an opportunity for disruption, etc., why aren't we all millionaires., etc. etc.
    • Arelius 15y ago
      I'm not sure that an open source webmail is an easy way to become a millionaire. =P
    • mseebach 15y ago
      Because not even "extremely security and privacy aware" hackers care enough to use it. That said, Zimbra is pretty bloody decent.
    • rgrieselhuber 15y ago
      The business model isn't there. I have yet to see a large group of consumers willing to pay for secure email and the only other alternative, advertising, leads to the exact same problem that you face with GMail.
      • atdt 15y ago
        I would pay and so would many others.
        • ansy 15y ago
• derekprior 15y ago
  Until recently the GMail web interface was simply unmatched. When GMail first shipped, their conversation view was so far ahead of what anyone was doing on the web or in a fat client. I don't try out as many email platforms as I used to, but from what I have seen, it's still the best implementation of conversation view available. Additionally, you hinted at the other main reason I use GMail in your first bullet point: "Control over your own data means you own it, you have it on your hard disk, it is not on somebody else's storage medium." Sure, this means Google has access. But it also means I don't have to find a way to make that data accessible to me everywhere I want it to be. I don't have to pay for the storage. It's a solved problem... and available at a great price point ($FREE). I trust google slightly further than I can throw them, so for now this is an okay deal.
  • Arelius 15y ago
    You imply that Gmail's web interface has been matched... I have not yet seen that to be the case, any suggestions?
• DanI-S 15y ago
  Because we care about efficiency, not least with regards to our time, and running one's own mail server is not an efficient use of such a scarce resource.
  • rphlx 15y ago
    It is if you don't want a potential competitor, potential acquirer, or just a large amoral corporation, to have an informational advantage over you.
    • Drbble 15y ago
      I would LOVE for someone at Google to violate their TOS and read my mail. That would be far more profitable than any business idea I will execute this year.
      • a3_nm 15y ago
        > That would be far more profitable than any business idea I will execute this year. Why do you assume that you would ever learn about it?
• jakeonthemove 15y ago
  It's easy, safe, secure and fast - but I also have an Yahoo Mail account as backup. And you can't beat the price, unless everybody decides to go French and fine Google for providing a great service for free when there are other companies that do it for a fee :-)...
• 13rules 15y ago
  1. Because Google solved the spam problem better than anyone else has 2. Because maintaining your own email server (which many on HN are perfectly capable of) is a giant pain, especially when you have to deal with SpamAssassin, DKIM, and all of the other things that you need to do correctly to have your email work 3. Because I still have my data even if Google loses it — I have a backup from downloaded email through Sparrow as well as an entire backup directly from my Gmail through Backupify (https://www.backupify.com/ https://www.backupify.com/) 4. Because I like to outsource the tools and services that I need to people that are experts at it. It's the same reason that I use Beanstalk for Subversion instead of hosting my own server, use FreshBooks for invoicing clients instead of doing it myself, and send transactional email through Postmark. It's easier. Much easier. And they are all very good at what they do. Bottom line: So that I don't have to worry about email. It just works, which allows me to do exactly the same thing.
• chc 15y ago
  None of his alternatives — team up with family and friends to maintain a mail server, join a nonprofit to use their email (WTF?), use email from a small ISP — seem remotely practical for most people, so no wonder they use Gmail. Even worse, aside from the first alternative, all of his objections seem to apply to the alternatives as well (only with the name of the new email host in place of "Google").
• mseebach 15y ago
  One point about privacy: E-mail is unencrypted and is delivered over public networks. Assume that any government, be it your own, US or other will read your email if they so please, and encrypt anything you don't want them to read.
  • cyrus_ 15y ago
    This trumps all the other privacy arguments. If the government wants to read your email, it need not access it at the endpoints -- it already has access to it in transmission over the compromised backbone. You would need to encrypt your emails to avoid this.
    • peawee 15y ago
      Someone I know once told me crypto is funny because all you have to do is compromise the OS's socket implementation.
      • icebraining 15y ago
        How so? The application does the encryption, not the OS.
      • etherael 15y ago
        Is that before or after you write a gui interface using visual basic to track an IP address? :/
        • peawee 15y ago
          To be fair, this is a guy who does hardened, embedded RTOSes. In the normal world implementation, of course crypto matters. Sometimes I need to take off my "all software sucks and I hate everything" hat before posting :-/
  • abruzzi 15y ago
    Which is why it baffles me that so few people use S/MIME--other than the trending preference for webmail which isn't well suited for encryption. S/MIME is simple to setup on most email clients, and offers encryption of the body of the mail if the recipient is uses S/MIME as well. There are several of us at work that send encrypted emails all the time.
• jws 15y ago
  1) Black listing - if someone in your IP neighborhood sends spam you can be silently blacklisted by Comcast, AOL, some random crazy zealots running a blacklist that other random people choose to use… et.al. and people stop getting your mail. Good luck getting unlisted. Wasted hours. Sometimes it's futile. 2) Spam filtering - If you are the sort of hacker that publishes their email address in order to interact with the community, and you become popular with spammers, then it is difficult to beat Google's spam filtering on the hundreds of spam you will receive each day. Until a few years ago I used to run my own servers and corporate servers. Nicely trained bogospam filters (this is work and involves the brain killing activity of reading borderline emails to categorize) got most of it with little risk of resource consumption failures. SpamAssassin got some of the remainder, albeit with some risk of exploding, but spam still got through. Those same addresses now let about 4 spam per year through the Google filters. You can't beat them. Your sample size is too small.
  • erikano 15y ago
    I hosted my own e-mail on a VPS for a few months before going back to Google Hosted e-mail, mainly for the two reasons you list here. I do want to go back to hosting it myself though.
• pasbesoin 15y ago
  I'm sure there are many other reasons, but also, at the time it rolled out (and/or when they integrated Postini), Gmail was sort of a miracle cure for spam. Just sign up, and spam-be-gone. A lot of people wanted such a "fire and forget" solution.
• cromwellian 15y ago
  I used to always set up and run my own mail servers. I no longer do so, not because I'm lazy, but because I have better things to do with my time than be a sys-admin, and worry about downtime, logs, security, and backups. Sure, Google has your mail. So use multiple accounts and keep your really private communications somewhere else, or use S/MIME or PGP Mail. But who the hell cares about them having data for an account that is mostly subscribed to public mailing lists?
• adelevie 15y ago
  Maybe I wasn't a self-respecting hacker when I first signed up for Gmail. I prefer to not risk missing emails (from switching addresses to non-Gmail) me over the "hacker way".
• tomjen3 15y ago
  Because being a hacker is about being curious and building stuff. It is not about keeping some strange 60ies style counter culture/down with the man going.
• duck 15y ago
  Just to give you an idea of how popular Gmail is, about 67% of the 7000+ subscribers for Hacker Newsletter (http://www.hackernewsletter.com http://www.hackernewsletter.com) use gmail and I'm sure a good bit more are Google app accounts. To add to this, yahoo.com is second with 3%.
• itmag 15y ago
  There is really no alternative. Set something up with the same features and I'll gladly pay to use it.
• shingen 15y ago
  Why don't all people make their own food? The same argument applies to almost any category of product, with varying ramifications unique to each. If I made my own soda, I'd leave out high fructose corn syrup. Why do I let Coca Cola poison me? And so on and so forth.
  • GnarlinBrando 15y ago
    Hansons and Jones Soda man, they are so much better.
  • Riesling 15y ago
    > Why don't all people make their own food? I do not think that this is a valid comparison. It would be more like, why don't farmers produce their own food (and rely on packaged food instead).
    • saalweachter 15y ago
      Most farmers don't produce most of their own food. The modern world is built on specialization: most farmers have specialized in some direction or another, and the ones who haven't usually make less money. At best, a farmer with livestock will occasionally take a pig or cow off to be butchered (since butchering is another specialty entirely, needing specialized equipment to do well), or a farmer growing corn will plant a few rows of sweet corn in a field near his house, or a farmer growing produce -- usually just a half dozen varieties -- will keep back a little for himself. But the calories a farmer will produce for himself are generally a small part of his intake. In the end, it's a better use of his time to focus on producing as much of a handful of crops as possible and buy what he needs from a grocery like the rest of us.
• fleitz 15y ago
  Because GMail users have different values than the OP does, and it's morally presumptuous to assume everyone makes the same tradeoffs the OP does. Why their choices don't make sense to him is because he hasn't taken the time to understand the value systems of GMail users.
  • icarus_drowning 15y ago
    This point can't be made often enough. I can't say that I think there are "too many" (or even "an increasing number") of posts on HN that seem to assume that everyone here has precisely the same set of (often extreme) values, but these kinds of presumptuous, somewhat self-righteous postings do pop up from time to time, and this is precisely the reaction I always have. The definition of "self-respecting hacker" does, after all, probably very between self-respecting hackers.
  • kc0bfv 15y ago
    I agree. His post smacks of the same attitude that many people (negatively) attribute to engineers in general. The, "this is how I do it, so this is how everyone should be doing it," attitude.
• eslaught 15y ago
  I get some of the article's points, but I don't buy his solutions. Quite frankly, I trust Gmail to keep my mail safe and secure more than I trust either myself, my friends or some NGO or other non-profit. I'd be lying to myself to think that I could do a better job of keeping a mail server secure, and I trust other small organizations even less. While I understand why the privacy issues make people uncomfortable, from a reliability perspective, Gmail is far and away the best option. So I can easily see why people might be willing to pay the privacy price in order to get better service.
• ary 15y ago
  When people have to choose between usability, accessibility, and reliability VS security and privacy they almost always choose the former. My response to this would be "Why do self-respecting open source and security advocates refuse to do the hard work of making security and privacy easily available to everyone?" <IMHO>Laziness, disinterest, and fear of killing off lucrative security consulting.</IMHO>
  • icebraining 15y ago
    There's no privacy in either case. Every single email passes in clear text through some ISP who may very well be storing copies of them. If you want privacy, you use PGP.
    • ary 15y ago
      That's what I'm getting at. Have you tried using GPG? Most "security" products (or projects) have terrible usability. Disclaimer: I work on a "security" product.
      • icebraining 15y ago
        Usability isn't a great concern to me ;) I used GPG with Alpine. I stopped when my key expired without every having sent a single encrypted email.
      • emidln 15y ago
        "Usability" is ill-defined. GPG seems to have pretty good "usability" from mutt (which auto signs outgoing email and optionally encrypts with a keypress). Maybe your MUA is broken or you forgot to RTFM.
        • ary 15y ago
          Usability (as I've employed it) is when someone non-technical can derive benefit from something beyond their understanding. Rest assured I've read every line of the GPG man page and then some.
• jroseattle 15y ago
  A simple answer: because running one's own mail server has little/nothing to do with being a "self-respecting hacker". For myself personally, it's because I value my time being spent elsewhere on things I consider more important. I simply don't care if that approach earns me a label of "non-self-respecting hacker" (as the original author implies).
• GnarlinBrando 15y ago
  Because it has an ease of access and the plethora of related network effects. Plus, I know more than a few ways to send any information that I would be that concerned about other than through gmail.
• tlots 15y ago
  Every time I email someone else who uses Gmail I'm right back to the same predicament.
  • deleted 15y ago
    [deleted]
• amalag 15y ago
  Two-factor authentication is a big feature for me. I don't have to worry about anyone logging into my account without my cell phone.
• mark_l_watson 15y ago
  Here are two reasons: it is convenient and it is easy to always have an up to date copy of GMail and other Google services data on my laptop which I then backup locally.
• philfreo 15y ago
  I'd like to be off of Gmail, but I don't know of a good alternative. I'd pay a couple bucks a months for a viable Gmail replacement if I really trusted its security and reliability, and if the UI, keyboard shortcuts, feature-set etc. were just as good.
• andrewcooke 15y ago
  well, i don't. spamassassin works fine. mairix on ssd searches as fast as google. mutt is an excellent reader; it can be used remotely via ssh. none of this is hard. it doesn't require huge amounts of maintenance. and i own my own data. before this, when leaving gmail, i looked around for an alternative webmail provider and almost went with runbox http://www.runbox.com/ http://www.runbox.com/ - they seemed to be the best of the bunch, avoiding many of the issues with gmail (being based in norway). but in the end it seemed easier to just do it myself.
• PaulHoule 15y ago
  deliverability. I can't post to W3C administered mailing lists from my real email account because my domain gets bounced. I've lost out on business deals because mail from business account gets blocked at the firewall in some places. You can avoid all that with gmail.
• tete 15y ago
  Sorry, when I just throw two links in, but the people who like GMail for the way you handle your emails with it there are at least two interesting projects. http://sup.rubyforge.org/ http://sup.rubyforge.org/ http://notmuchmail.org/ http://notmuchmail.org/
• blumentopf 15y ago
  To add to this article: Why do people not use PGP or S/MIME? I've submitted my resume to a couple of people who posted in the Who's Hiring thread and checked for each of them if they have a PGP key submitted to the usual key servers (e.g. pgp.mit.edu). None of them had done that. Beats me.
  • icebraining 15y ago
    I don't have a key because no one has keys ;)
  • Estragon 15y ago
    I had a similar experience recently. Hardly anyone seems to do that. I shouldn't be too surprised, I guess. I had never used gpg to communicate with humans up to that point myself. But I had imagined that all the cool kids did.
  • beza1e1 15y ago
    When I did use PGP and just signed my mail, people regularly asked about my garbled message (pgp/inline) or broken attachments (pgp/mime). So, fix everybodys email client first, please.
• UK-Al05 15y ago
  Because a hackers time is valuable, and google has solved my email requirements. I dont want to set up and maintain a email server. It can be annoying as hell I've done it before. It's 'fiddly'. So many config files(If you set it up properly so it uses encryption) and a lot of email services will block you if your not on a whitelist or sometimes blacklist you for silly reasons. I used to run my businesses email on ec2, you will be going through blacklists and whitelists for a long long time.
• bwarp 15y ago
  I took "the pragmatic UNIX way" about 15 years ago with email. It works. I've not had to change it and don't feel compelled to bother changing it. I host my own mail server. It's not hard regardless of the platform you use. I use debian+postfix+mutt as it pretty much works out of the box. I've changed perhaps two lines of postfix configuration (to set up maildir) and added a couple of lines to my muttrc to pick up maildir and view html mail using links. I don't get SPAM at all. I don't stick my email address anywhere on the Internet where it will get snagged into a spam database. I never have. I've not had a single SPAM message in 15 years with the same email address. I do not use any spam filtering software. I use aliases for mailing lists which are created and destroyed on demand using a couple of 2 line scripts ("append, newalises" -and- "sed, newalises"). I can get into it quite happily from anywhere using SSH on my mobile device using MIDPSSH or another machine with PuTTY, iSSH, or good old terminal SSH. I don't keep emails ever. I action them, then throw them away. Those who keep everything are like the crazy old people who live in rooms stacked to the ceiling with newspapers. I have nothing to backup or care for in that department. If I lose my mailbox, I have lost nothing. I do not manage my tasks with email. I use a text file in my home directory called notes.txt. My contacts list is a text file called contacts.txt. Works on anything. Can be grepped. My calendar is a text file called cal.txt. Works on anything. Can be grepped. I probably spent about an hour in the last 10 years on email server configuration. That's considerably less time than some of my peers spend dredging through their 5 years of gmail junk. Self respecting hackers don't use Gmail and Co.
  • fbuilesv 15y ago
    I unlike you, took the pragmatic way (without quotes or Unix). Email is part of my life and I don't want it going down. I don't spend time configuring servers, updating packages, guaranteeing uptime. My email is federico@mheroin.com, and I write it everywhere. I still don't get any spam. If I need an alias I just append characters to the email address and I don't have to fiddle with anything else. I can get it quite happily through IMAP using Emacs or the client on my phone. I can search for past emails in seconds without worrying about the space they consume. I can share my contacts and calendar appointments with one M-x command. I'm curious about your setup since Debian/Postfix/Mutt are not enough for POP3 or IMAP. How do you access your email from other devices (phone, table, etc)? I hate Gmail, with passion, but Google Apps is the easiest way to keep all my email working without thinking about reliability/installation/etc.
• jbrkr 15y ago
  Surprised no one has mentioned FastMail [1] already. Excellent service, reasonable price. It's good to be a paying customer, so if something goes wrong there is a sense of accountability for the service provider to remedy the situation. With Gmail and other free service providers, remember that you are not the customer, you are the product -- for advertisers. 1) http://fastmail.fm/ http://fastmail.fm/
• ElliotH 15y ago
  Because I've never once found a decent no-nonsense no-ugly-web-interface-preinstalled-that-I-don't-want guide, and unlike anything else I have installed on my server, I find email baffling. I'd switch if someone gave me a decent enough guide I'd go for it.
• api 15y ago
  1. Running a mail server is an unbelievable pain in the rear from an IT perspective. Note that by "mail server" I mean a good setup with spam filtration, webmail, SMTPS, IMAPS, etc. 2. Really good rich webmail. I personally use Mac Mail.app most of the time, but having that rich webmail is nice. 3. Filters mail at the server side. 4. Very good spam filtering... I post my gmail addresses on web pages with no obfuscation and get maybe 1-2 spams per month. Cumulative: it's one more thing I don't have to jerk around with. It just works.
  • davidw 15y ago
    The one that got me was spam filtering. Google does a pretty good job at that, and I was really drowning in it. I think they deserve a lot of credit for creating a product that both my mother (definitely not a 'power user') and I (previous email client: Emacs' Gnus) can both be reasonably productive with.
    • mike-cardwell 15y ago
      It's really easy to install SpamAssassin and point your MTA at it. Even the default configuration is highly effective.
      • davidw 15y ago
        I did that, back in the day, but it just wasn't enough.
        • pyre 15y ago
          One could always mooch off of Gmail's spam filtering... Use SpamAssassin in conjunction with a gmail account that is only used as an attempt to attract as much spam as possible. Then just download the spam folder over IMAP and use it to teach SpamAssassin...
          • coopdog 15y ago
            Gmail's spam filters are so good because they have a network effect going though, I doubt one spam folder would achieve much, you need a much bigger sample of all the spam than one account could ever attract
• tikhonj 15y ago
  I use Gmail because I don't care about my emails. Google can know that I'm subscribed to the Haskell, FSF and school mailing lists and that I sometimes talk about school projects or work, all without affecting me much. And that is all I use email for. Now, I could run an email server myself, but I do not have the time, experience or inclination to do this. I could also use a provider that does not use proprietary software, but that would be pointless: since they're running the server, I would not have significantly more freedom than I do with Gmail. So really, the reason is simple: it doesn't matter much from a practical or ideological standpoint, and I'm incredibly lazy.
• abecedarius 15y ago
  I use my own server for personal mail, and gmail for mailing lists and a backup address. I'd show up as a non-self-respecting hacker to the OP.
• packetslave 15y ago
  It's quite simple: "self-respecting hackers" care more about getting shit done than futzing around with their email service. Gmail (for the most part) Just Works.
• ck2 15y ago
  Roundcube is getting really good for running your own webmail http://roundcube.net/screens http://roundcube.net/screens
  • beza1e1 15y ago
    What about Conversation View and Priority Inbox?
    • ck2 15y ago
      Roundcube can take plugins too - someone could write them.
• deleted 15y ago
  [deleted]
• dhruvbird 15y ago
  1. Setting up a mail server and keeping it running isn't easy 2. Spam filtering 3. (already mentioned) uptime - you don't want to lose email 4. The security of your email doesn't depend only on you - it also depends on where people you are communicating with are hosting their email. It's much easier to get search privacy since the only other entity involved is the search engine. Which is why I use https://duckduckgo.com/ https://duckduckgo.com/ for search.
• tzs 15y ago
  Note that he's basing all this on looking at mailing lists. There are surely many people who, like me, who often use gmail for mailing lists, but have our own mail servers for our "normal" mail.
• damoncali 15y ago
  If my accounts were shut down and all my email handed over to any 3 letter agency on earth, I'd be mildy annoyed. Dare I say, inconvenienced. For like a day. There just isn't anything in it worth worrying about. I can be up and running on another provider in minutes while they wade through my Amazon.com receipts and bug reports for CRUD apps.
• raldi 15y ago
  Frees up more time for hacking.
  • khyryk 15y ago
    Pretty much this. I spend more than enough time fiddling with things as it is. Moreover, the article latches on to security/privacy whereas my primary concern is ease of use.
• furyofantares 15y ago
  Email isn't secure and should not be treated as such. None of the author's suggestions change this. The only way to be sure private email communication is private is to use encryption and only communicate over email with others who will do so and will keep their system secure.
• theashworld 15y ago
  Because gmail is a good product. Please don't tell us what not to use. Point us to a better product. (spam, uptime, ease of use, free, fast, etc) Got one? Yeah, I figured.
• ishbits 15y ago
  I self hosted mail til 2008.. Sometime in 2008 we were travelling more than at home so I moved to a virtual private server. During those travels, the VPS had catastrophic failures so I bit the bullet and moved the domain to google apps and it worked quite well. The intention was to move back to my own hosting when settled again, the gmail keyboard shortcuts are so good (not quite mutt) which has kept me there. I use offlineimap to keep a local backup of my email, and like anyone should, I think of emails as postcards. If its only to be read by the recipient use encryption!
• linuxhansl 15y ago
  I'm a self-respecting hacker and I use Yahoo mail. I guess this would put me even lower in author eyes. It's just convenient (where I can access the Web I can access my email, no spam). As long as I am aware of the that fact, I can encrypt my mail if necessary or use alternate means of communication (such as a different email service possibly my own, etc).
• TomGullen 15y ago
  Because it works, it's reliable, it's nice to use and it's another thing I don't need to worry about.
• antoncohen 15y ago
  I live in a world where I expect and need email access from anywhere, any computer, any mobile device. I also expect tight integration with calendar and contacts. Those requirements mean I need webmail and ActiveSync. IMAP Idle (push) has reasonable mobile support, but CalDAV and CardDAV have limited support -- so ActiveSync it is. ActiveSync is non-existent in open source software. The best webmail client I've used that can be used with any IMAP server is Roundcube, but it doesn't have calendar support. Zimbra is the only open source software I've seen with good mail+calendar+contact integration, and it has a good web client. Perfect, except the open source version doesn't support ActiveSync, and is missing the backup utilities. The commercial version is a minimum $399/year. Fine, I'll pay it. Now I need to host it. I want my email to be highly available. So I want to cluster two Zimbra servers in one data center, and cluster two backup MXs in another data center to store and forward my mail if the Zimbra DC drops off the net. Zimbra supports HA clustering with Red Hat Cluster Suite or through the HA clustering of virtualization like VMware. RHCS requires a highly available SAN as backend. Damn, an HA SAN is going to be expensive. Maybe I'll do VMs. But virtualization products like VMware and RHEV will require an HA SAN or NAS. Fine, I'll build an HA NAS with open source. I'll deploy two ZFS heads in an active-active cluster... wait, clustering will require purchasing licenses from a company like Nexenta. Or I can get active-passive from iXsystems. So I'll buy the cheapest Nexenta license which is $1725, plus the HA Cluster license for $4900. I'll connect those heads to a dual-controller SAS JBOD which only costs $3795. I'm now going to fly all this gear to a non-US-friendly location to install it in a data center. Each piece of hardware as redundant power supplies. I will connect the power supplies to separate power distribution units, the PDUs are on separate circuits. Each system has dual Ethernet going to separate switches, which in-turn uplink to dual-clustered routers, which uplink to the multi-homed internet provided by the data center. Because I'm on the other side of the world I'll also have a console server, and the PDUs can remotely cycle power. Awesome! I now have the email setup I want, and it only cost me $30,000 and a month of my time! Or I can sign up for Google Apps, where they will host my domain's email, and provide all the features I want, and have a better interface, and not require maintenance, and have better uptime, all for free! I've administered old school sendmail+procmail setups without webmail. I've administered Postfix+Dovecot+Roundcube+LDAP. I've administered Zimbra. I've administered Google Apps for Business. It isn't worth my time and money to do anything other than Google Apps.
• notatoad 15y ago
  i tried running my own mail server for a while. it's mostly tedious, but there was some settings and configs to poke at. the problem is that playing with configs and live mail servers don't go together so well, half the time my email server was down and mail wasn't getting through because i was playing with things that shouldn't be played with. so now i use gmail. no matter how much i try to screw that up, my mail still comes through.
• tobiasu 15y ago
  This is a pointless comment, but with all the whining here I feel like making a counterpoint. I run my own mail/irc/web/file/etc -server. Postfix on OpenBSD with maybe 10 config variable changes to add a DNS blacklist of my choice + secondary MX for a friend. FDM for sorting mail and piping stuff through bogofilter. Mutt and SSH to read mail from anywhere. I post my email address everywhere and get about 10-15 spam mails per day that escape the blacklist. Of those, 99% are sorted out by bogofilter. I scan them for false positives like I scan other mailinglists for interesting topics. There are about 700 mails from various ml's every day. The maintenance time this setup "costs" is recovered in less than a week of not having to click through the slow gmail interface. There is nothing to do. Backups are done via rsync and cron, but they have to be done anyway. Point is, running a private mail server is easy. But then I don't call myself hacker...
  • icebraining 15y ago
    The maintenance time this setup "costs" is recovered in less than a week of not having to click through the slow gmail interface. Nothing forces you to use the Gmail interface to use their mail servers, though. I certainly don't, unless I'm away from my machine.
• a3_nm 15y ago
  Setting the privacy and security issues aside, I wonder why do so many self-respecting hackers use the Gmail web interface (instead of, say, fetching their mail via IMAP and use another client). Dedicated mail clients like mutt can be much more efficient (keyboard-driven) and are a lot more customisable (run macros, pipe mail through external commands, etc.). I wonder why so many hackers aren't put off by Google's "one size fits all" approach.
  • jff 15y ago
    Gmail's keyboard shortcuts are really pretty nice. hjkl to move around, enter to view a message, y to archive, m to mute, r to reply. That's a pretty damn good start. off-topic, it's a little weird how it's expected that "true hackers" must become ill at the very sight of a mouse.
    • a3_nm 15y ago
      Yes, I know that Gmail has some keyboard shortcuts. I'm also aware that you can even customize them to some extent, but the flexibility has nothing to do with mutt's. To give a concrete example, I am moderating some institution's mailing lists through a pretty exotic system, and I rely heavily on my mutt configuration to accept/reject mail and prepare rejection mail. In one keystroke, for instance, I prepare a reply to a certain MIME part of an incoming email notification and pipe it through a script to add boilerplate text and edit the message headers automatically. I wonder why so many hackers prefer Gmail's convenience to this sort of flexibility. As for the mouse, like the keyboard, it is a tool which is appropriate for certain tasks and less appropriate for others. I think the keyboard is more appropriate to deal with email.
  • acdha 15y ago
    Two notes: you appear to be unaware that gmail can be fully keyboard driven (press ?). Second, after years of using mutt I very, very, rarely miss the extra features: 99% of my use was doing things like viewing attachments or links, which is implicit to webmail
• ansible 15y ago
  <code> But almost all of those lists are about very technical projects, where the only subscriber base should be people from either the IT security community, or the Free Software community.</code> Sample bias. Why would I be concerned about anything other than convenience with regards to the email account used for public email lists? The messages are public, my address is already likely been harvested, so anything I do is essentially public. If I want to keep stuff private, that is maybe the time to set up my own email system. And use encryption and all the good stuff.
• jff 15y ago
  I have messed with running my own email server from time to time, but it generally takes about a day before I get an email bounced back thanks to the overzealous IP blacklists--for instance, as I recall, all Comcast dynamic IPs are blocked automatically by Spamhaus. Great, so I either need to pay extra for a static IP which might be non-blacklisted, or I can pay for hosting and just hope that's not blacklisted. Gmail is big enough and rich enough to stay off the blacklists, I'm not. So I use Google Apps hosting, even though I'd rather not.
• gwern 15y ago
  > Control over your own data means you own it, you have it on your hard disk, As a self-respecting hacker, I was able to put in a 'getmail_fetch` call to my crontab.
• xarien 15y ago
  Because the word hacker isn't a badge of honor.
• pwthornton 15y ago
  Because it's the best email system available for most people. If you value productivity and usability the most, Gmail is the way to go. It's that simple. Gmail is the only email system that I can tolerate. It actually makes using email borderline fun, whereas even something like Exchange is a nightmare. It works great with various applications, smartphones and has by far the best Web interface around. It handles spam well and allows me to easy filter messages (and have those filters work across devices). For most of us, email is a tool that helps us get work done and communicate with family and friends. Rolling our own solutions is not worth the extra time, headaches and lost usability. Google doesn't care about our data individually. They make money in anonymized, aggregate data. That's why I don't care that they are making money off of my data, because it's not my data that they care about. It's our data that they really care about. And while I'd prefer if my email didn't fall into the hands of the US government, I don't actually have anything that I care that they see in it. It's more principle than anything else. And, as a US citizen, if I rolled my own solution, I don't think it would be any safer in my hands than Google's when it comes to warrants. I do have real fears. My real fears with email are in using a system that isn't usable, isn't reliable and has data integrity issues. At the end of the day, Google's servers and technical know-how surpasses mine, and I feel that my email is safer and less likely to be lost due to hardware failure in their hands than in mine. It really depends on what you value. If my email information was really sensitive, I would probably care more. If I were a company that valued sensitivity a lot, I might not use Gmail. Certainly if the work you do or the industry you are in needs the utmost privacy, you should look into the most secure option as possible. But as an individual, Gmail is as good as it gets for me.
• zobzu 15y ago
  Whatever people may say, I run my own mail server on my DSL line at home (static ip), on a regular cheap PC. It's also the gateway, web server and a few things like that - since 2000. It's currently running Dovecot, Postfixc, Roundcube, MySQL (even thus I plan to switch to PostgreSQL since, 10 years, but I'm lazy :P), amavisd-new, spamassassin. It's setup with SPF records and DKIM. I used to have grey listing as well, but I turned that off a year ago. I have several emails, and friends, family also, hosted there. * Spam: The "spam advantage" from Google's gmail makes me smile. I get less spam on my accounts, even the ones for which I post my email everywhere, than on my gmail account (which I never use anywhere, or even use for mail - its just my Google account - so its been guessed or used through OpenID, or Google leaked it somehow). Even with grey listing off. Some guys seems happy with their 2 spam a month on Gmail. Well I get zero spam a month. And I almost never have false positive either (happened maybe 5 times in 12 years? and those were very spam-looking emails from automated services which i actually wanted to read) * Maintenance: That makes me smile as well. Sure, I update the server every month or so. It's a 10min task. Stuff don't break. And yes, I know my stuff also, which helps. Backups are done via duplicity to a friend's system, and to a separate drive (had to switch the drives once) Mail stay alive 5 days if box goes down. 12 years, did get network outages sometimes, never lost a mail. Not one. Sometimes, Ive friends with similar servers and we MX each others for safety, but that was not necessary up to now, because its never been down longer than a day (again its always "network outage" or "power outage" kind of issues). * Interface. Well, I can understand it, but I don't care. Why? Because I very rarely use the web interface. I use IMAP clients and ssh+IMAP (mutt). Sometimes, I do use the web interface, and RoundCube is actually very decently good, even if its not super complete. It's fast and enjoyable at least. * Domains refusing to talk to me Well, this has happened sometimes in the past. I sent requests for white list, and it got granted 99% of the time (in fact, its been only denied by trendnet). When denied I set the transport to use my ISP's SMTP. I haven't had to change those settings or make request in the last past 5 years or so. Again, its a much smaller deal than what you're lead to think.
• etherael 15y ago
  This is actually a pretty good indicator that integrating PGP in a usable "it just works" fashion might be a really good thing to do these days. If the question is why are you allowing google the ability to violate your privacy, the solution of running your own mail server is only valid to the extent that we acknowledge the current reality that the vast majority of people do not use encryption or signing for email correspondence. How about a simple sign / encrypt / forward service for untrusted (ie, pretty much everything) hosted email accounts that takes all incoming unsigned/unencrypted mail and at least encrypts it before delivering it to your untrusted mail server? Of course then the issue is how do you prove that you're any more trustworthy than google or any other party, but it's an interesting problem to consider.
• inopinatus 15y ago
  Well, to answer the question head-on. I am a self-respecting hacker and I do run my own private mail server for my personal mail. But I use Gmail for what I think of as "impersonal" mail. This includes mailing lists such as those operated by the OP, as well as general notifications from other sites and services. I gain free storage and bulk management tools for a body of data I perceive of low value and sensitivity. Moreover, Gmail's spam filters are better than mine (spamassassin). That has particular utility for these low-value accounts that are more likely to have the associated email address disclosed beyond my control. For things I care more for; personal communications and so forth, well, they still land on the private host.
• the-come-ons 15y ago
  I host my own mail server on a VPS. I made a clear cut from the big G about a year ago. I switched to duckduckgo.com as my main search engine, installed noscript, blocking all analytics requests, and set up my own mail server on Arch Linux using dovecot, postfix, and spam assassin. This setup has been wonderful and I feel proud to use it since I was once afraid of various issues which, in reality, have been minimal! I can access my mail from any computer or mobile device that allows SSH or has an IMAP mail client. Once after a system upgrade mail was no longer being delivered to my inbox. I noticed after a day and thought it was strange. I forgot to reboot the mail server software after upgrading. Soon after my mail server rebooted I had many emails delivered from when my mail server was down. This excited and surprised me. I thought I would never get those emails but I assume the mail clients just held on to them and tried sending again intermittently. Any self-respecting hacker should at least try to setup a mail server on a virtual machine. The hacker will find it interesting and useful. It really only takes a couple hours and it is fun! For those hackers who are brave enough, here is the guide that I used: http://www.gelens.org/archlinux-mailserver/ http://www.gelens.org/archlinux-mailserver/
  • gst 15y ago
    Sending mailservers typically try to redeliver mails for several days if something goes wrong (and if your mailserver does not respond with a permanent error).
• alexwolfe 15y ago
  One word: Spam
• PedroCandeias 15y ago
  You team up with some friends, people you know and trust, and you share the administrative and financial effort I have been burned by people I trusted much more often than by google. You use a local, small Internet service company rather than one of the big entities. How is that better? You're still bequeathing your data to a commercial third party. I get the OP's point, and hope I never have to eat my own words, but the reasons to go through all the hassle of moving out of google et al aren't all that compelling imo.
• gaving 15y ago
  ".. sites like sourceforge ..." articles showing its age
• caller9 15y ago
  Because hackers want to work on interesting problems not ones that are solved for free by someone else.
• johnpowell 15y ago
  I just stayed up all night setting up my own on Linode. I barely know anything about servers. I wanted to do it for months and have tried for weeks. I use a lot of google stuff and wanted to move off. I trust Linode a lot more than I trust google. Now roundcube is working and I am a happy camper.
• tehwalrus 15y ago
  In the UK you are legally responsible to save all mail forever (if you run your own mailserver), in case the police want to search it. For this reason alone I never use my own mailserver - my content is actually MORE deniable this way.
  • gst 15y ago
    According to Wikipedia that is wrong: http://en.wikipedia.org/wiki/Telecommunications_data_retention#United_Kingdom http://en.wikipedia.org/wiki/Telecommunications_data_retenti...
• elmindreda 15y ago
  Judging by the replies, it seems to be a combination of preferring webmail and having poor ISPs. Personally, I have run my own email server for several years now and have found this to require almost no maintenance. On the server side I use Postfix and Dovecot on Debian, and on the client side I use Thunderbird. For security, I only allow local IMAP connections and tunnel IMAP and SMTP from my laptop over SSH tunnels set up when I log in, and the server only accepts public key authorisation for SSH. IMAP means I get any email within seconds and Thunderbird automatically sifts away 95% of what little spam I receive. The server is under my desk and the only downtime I have is for kernel upgrades and problems on the ISP end, which are both rare.
• tluyben2 15y ago
  Unfortunately I cannot live without the Gmail web client. There is no comparison (even with the, worse for me, new layout). It's fast everywhere, even via my bad phone internet connection, it indicates properly when it can and cannot send stuff etc. It's just better than anything I know and have. I have tried to use other things, but for my, quite insanely big mailbox, nothing else works. Not only did I import into Gmail all my mail I received since the late 80s, I also get immense amounts of email through the system as I use mail for creating alerts and emergency lists on servers I monitor and such. Wether or not this is proper use of mail (I think it is; I am very productive with ONLY the mail client open; everything I need comes to me in there, neatly filtered, including news, server health, error logs, bug tracking etc; everything has it's own email address I can mail and receive mail from), it works very well, but it's not supported by normal clients; Mail.app just stands there getting mail with high CPU load and Thunderbird is unusable as in stuck all the time (I haven't tried that for a while, but it used to be anyway). Gmail webclient is just nice and fast since the last infrastructure update Google did (the engineers mailed me nicely that I wouldn't be able to use my mail for about 1-2 days while migrating and this proved to be true). I know what I need instead of mail (but including mail functionality); I just don't think it has been built yet :) Or has it?