816 karma · joined January 21, 2014
From Google: "At Google Cloud, we do not access customer data for any reason other than those necessary to fulfill our contractual obligations to you. Technical controls require valid business justifications for any access by support or engineering personnel to your content. Google also performs regular audits of accesses by administrators as a check on the effectiveness of our controls."
Justification reason codes for data access https://cloud.google.com/logging/docs/audit/reading-access-t...
That said, I agree with what you've said here: "Laws enshrining natural rights of privacy of personal data can't come soon enough." Nicely put.
Man on Wire
Both redefined for me what it means to be mission oriented and committed. And I have a Guinness Record, so I thought I was obsessive already, but I’m nothing compared to the commitment of the two men in these documentaries.
From the original article: "What's wrong with encrypted transport headers? One possible argument is that middleboxes actually serve a critical function in the network, and crippling them isn't a great idea. Do you really want a world where firewalls are unviable? But I work on middleboxes, so of course I'd say that. (Disclaimer: these are my own opinions, not my employer's)."
(Credit for this observation goes to my friend NC.)
Related video by me and another googler about anti-phishing work by Google. https://www.youtube.com/watch?v=hu6VkVmRMow
I like your suggestions here. I've considered buying a car and renting it out like you suggest, but I currently make $100,000/year doing that with the extra room in my SF house, and that's enough work that I can't afford to extra time to do it with a car also. And I think I'll make more money on Airbnb vs. Turo/Getaround. Homes are easier to monetize than cars.
Again, thanks for digging in!
On the other hand, Macie has a GUI wizard. DLP API is an API. So if you can't code and just want to scan S3 then Macie might be for you, until Google DLP builds a GUI, if there's demand for that.
Someone should do a comparison of how successful each engine is at picking up sensitive data. I suspect Google DLP will be tuned better, but someone should do the test on a dummy data set and release results. That would be the most interesting comparison.
I work for Google.