Comment by scrollaway | Hacker News Reader

Comment by scrollaway | Hacker News Reader

Parent Full thread

https://gsuite.google.com/

A lot of people don't seem to know that GSuite is both usable (useful, even) and affordable (cheap!) even if you are a solo user.

Here's a quick howto:

1. Go buy your own domain name (~$10/yr, https://www.gandi.net/). Make it something you like, something professional. This is for your personal email address. firstname@lastname is the most common pattern. I recommend everybody do this. Even if you want to stay on gmail, yahoo, aol or whatever you can set up redirects. This becomes an email address you truly own, and your email provider cannot hold you hostage anymore.

2. Create a new GSuite account ($5/mo, https://gsuite.google.com) - The entire setup is guided and completely painless if you're even slightly technically-aware.

3. Migrating from a previous Google account: You can use Google Takeout to get a lot of your data (https://takeout.google.com/). Unfortunately, migrating the data automatically is hard. For email you can set up IMAP from gmail, for Drive there's migration scripts. But you also don't have to migrate immediately, Google is good at multiple accounts.

I know I'm sounding like a Google shill right now, but GSuite really is what people tend to ask for when they talk about Google's handling of data and say they'd pay $5/month to "regain their privacy". Well, here's your occasion to do so.

Is GSuite better from a privacy perspective? It doesn't show ads in gmail, but I'm pretty sure they're still tracking you and feeding that into ads on youtube etc.

from the DPA that you can sign with Google with regard to GSuite:

> 5.2 Scope of Processing. > 5.2.1 Customer’s Instructions. By entering into this Data Processing Amendment, > Customer instructs Google to process Customer Personal Data only in accordance > with applicable law: (a) to provide the Services and related technical support; (b) as > further specified via Customer’s use of the Services (including the Admin Console > and other functionality of the Services) and related technical support; (c) as > documented in the form of the applicable Agreement, including this Data Processing > Amendment; and (d) as further documented in any other written instructions given > by Customer and acknowledged by Google as constituting instructions for purposes > of this Data Processing Amendment.

So no, they probably can't track and feed that into youtube ads, because it is not a cause that provides the service or support.

Afaik Google announced last year that they stopped processing GSuite account emails to a large degree.

> Afaik Google announced last year that they stopped processing GSuite account emails to a large degree.

Well, that's surely reassuring.

> This becomes an email address you truly own, and your email provider cannot hold you hostage anymore.

It's hardly yours. Using a custom domain for anything sensitive like banking is not a good idea. Your registrar is almost certainly a lot easier to phish/social engineer/whatever than Google.

> Your registrar is almost certainly a lot easier to phish/social engineer/whatever than Google.

Please don't spread unsourced FUD. I'm not saying registrars are perfect (although Gandi, which I linked, has an impeccable track record), but everyone uses registrars for their domain name, even the biggest businesses out there.

If you have a problem with a particular registrar, I invite you to source it and share it. But the general idea that the potential for a point of attack makes the email "not yours" is nonsensical.

What matters is the email address you give out to people. Where that email is stored and ends up doesn't matter. Which registrar owns the domain doesn't matter.

I'm not spreading FUD. I'm spreading Maciej Ceglowski's information: https://techsolidarity.org/resources/congressional_howto.htm...

@pinboard has explained on Twitter that registrars can get tricked into letting an attacker into your domain account (of course they can). And from there they can update your zone file to send your mail wherever they want.

This isn't about the storage of your email.

Even if such an attack were to take place, that doesn't mean you don't "own" your email. You own it far more than an @gmail.com address...

> but everyone uses registrars for their domain name, even the biggest businesses out there.

Everyone uses registrars, but in some cases you can be your own registrar. Like in Finland, when .fi domain registrations were moved to exclusively to registrars (initially you would register domains with Finnish FCC equivalent, later option was added to let registrar handle that for you and finally it was moved to just registrars), quite a few companies and individuals registered to become registrar for .fi domain.

a) 2FA for your bank account

b) Who is going through all the trouble to target me specifically with a phishing attempt.

Where does it say that paying for GSuite means that Google stops invading your privacy? I can't find it, and can only assume the only difference is you don't see the ads.

Reply on news.ycombinator.com