Google Slips Talk of Online Storage Service

sonsonete writes "Reuters reports that Google is preparing to offer online storage, according to company documents that were mistakenly released on the Web. From the piece: 'The existence of the previously rumored GDrive online storage service surfaced after a blogger discovered apparent notes in a slide presentation by Google executives published on Google's site after its analysts presentation day last Thursday.'"

Concept vs. Reality

[ackthpt (218170)]

In principle, not a bad thing, considering Jane & Joe CtrlAltDel don't usually make backups and probably hardly come close to the actual capacity of their hard drives. Not likely to be a realistic consideration for Slashdotters who count their media, development tools, etc in the terabytes, though.

But there's the worry that if Google did this, how long before the Bureau of National Security Over Privacy and All Else presses Google to make content of this online storage available to the FBI? RIAA? MPAA? Cheney Department of Vindictive Leaks?

Google recently squared up against the U.S. Justice Department which has subpoenaed a limited set of data on Google search habits, drawing an outcry from privacy advocates.

It's thought provoking, certainly. Then there's the inevitable:

Google, Inc.
1600 Ampitheatre Parkway
Mountain View, CA 94043

Dear GDrive user, we are very concerned about recent activity with regard to your account. Please verify you User ID at the following link. www.google.com/accounts[links to: update.google-account.info/idpasswdstealer.html]

Remember never to give out your User ID or Password to people you don't know, those who spit while talking, people who do not wash their hands after using the lavatory, wombat ranchers, msn fanboys or anyone with the middle initial of J.

Best regards,
Google Internet Security
Google, Inc.

I'll pass.

Encryption

[Neil Watson (60859)]

Encrypt your files.

Re:Encryption

[vhogemann (797994)]

Better yet,

This theoretical GDrive could encrypt your files automagically, this way only YOU from YOUR COMPUTER should be able to view them. Google can skip all these legal problems claiming that they just provide the storage, but doesnt have acess to the contents of the files.

Of couse GDrive will send some meta-information about the files to feed Googles TextAds, probably the same info that GoogleDesktop send, and keep some kind of hash to identify identical files, in order to save server storage.

Just my $0.2

Re:Encryption

[drgonzo59 (747139)]

Of course, to NSA/FBI/CIA your encrypted GDrive that holds tax documents and family photos will look like it holds al Qaeda training manuals. So when the CIA takes you to Egypt for some fun interrogation and put a knife to your neck, you'll happily give them your passphrase so they can see what's on your GDrive.

Remember, the idea of a honest executive branch that will got to a court to get a permission to spy on you, or that you will get a speedy trial, or even a lawyer is history. Through fear we have allowed the government to become what it is now, blame the neo-conservatives for that if you want. Watch the "Power Of Nightmares" movie [archive.org], I just saw it two days ago, quite enlightening, not totally objective but nevertheless it was worth my time (3 hours).

Re:Encryption

[Firehed (942385)]

I never said they couldn't get the password, I just said they'd need it. I'm sure it would be a lot less trouble for them to just take your machine in full due to whatever law that was they put in place, rather than drag you off to Egypt to force out the password. Because if they did that, they'd probably have to kill you - if you're geeky enough to encrypt your files (not especially, but still enough), I'm sure you'd post the incident on every forum you're a member of (or livejournal or whatever, or maybe upload the shot you got off your cameraphone to Flickr). IIRC, they can steal your computer and not even tell you for two months what happened or why (or perhaps longer, but it's not as if you're not going to notice that you're computer's gone missing); you might go on the assumption you've been burgled until it shows up in a battered USPS box on your front steps.

Re:Encryption

[drgonzo59 (747139)]

Honestly, if they just hint that my wife/parents/children just might end up in an "accident", it would be enogh for me to shut up. If they could capture a German citizen (El Masri), put a diaper on him, drug him and fly him God knows where for harsh interrogations, then release him in the middle of Albania five month later, then I wouldn't hold it above them to harm my family to get me to shut up... I am surprized that guy even had enough guts to talk about it. I am sure you've heard about him, here is a link [aclu.org] on the ACLU website about his case.

Re:Encryption

[Kadin2048 (468275)]

That's not much of a commentary on Google, is it? I mean, if they're willing to take you to Egypt (or wherever) to perform some "rubber hose cryptanalysis," then there's nothing really stopping them from coming in and taking your computer, too. So having your data in encrypted form up on Google's servers really isn't increasing your exposure or risk any.

In fact, if Google encrypted everyone's files when they uploaded them on their GDrive, then it would probably limit your exposure, since then the encryption couldn't be an immediate red-flag. It's easy to single out people who are using encryption and get their passwords through some other means (keysniffing, etc.) when its only a few per thousand or million users, when it becomes universally used then it's much more difficult.

However as other people have pointed out I'm not sure that Google will offer any encryption, not because of government coercion but because it makes the data much harder to index (for advertising and searching purposes) and compress (you don't think that your 325 MB GMail box really takes up 325 MB on disk, do you?).

Re:Encryption

[jrockway (229604)]

> makes the data much harder to index

1) Upload
2) Index
3) Compress
4) Encrypt.

Problem solved.

Re:Encryption

[drgonzo59 (747139)]

In a sense you are saying this:
1) Upload to Google
2) Google indexes it
3) Google compresses it
4) Google encrypts it => Google has the key.

After this is done ask yourself, how is your data now more secure against the government looking at it and against other party looking at it, than if you skipped #4 and didn't encrypt. What happens next is this:

1) FBI/NSA/Whatever1984Agency asks Google for you info
2) Google decrypts it
3) Google hands it over it Uncle Sam
4) You have pictures there of you family at Disney World
5) By accident a large trashcan appears in one of the shots
6) Uncle Sam assumes you are scouting for places to hide a dirty bomb
7) You get arrested and detained for 5 months in some unknown prison

So how about the updated procedure to avoid the unpleasand Uncle Sam encounter:
1) Encrypt using a long passphrase that only you will know
2) Upload
3) End


This would work only if everyone would be doing it. Otherwise, as someone has mentioned above, if you are the only one of 10000 people who encrypts his stuff, you will look suspicious and they'll find a why to get the key from you to look what you got in there.

Re:Encryption

[krbvroc1 (725200)]

I think he means they would apply a 'text' scanner to a 'binary' encrypted document and there are odds that those letters could be found in many binary document. Thereby you might still be 'flagged' coincidentally.

That's just what we need!

[dada21 (163177)]

Free online storage from a company that can't keep their documents safe from prying eyes -- including the document that eludes to the fact that they're offering free online storage.

Whoops.

Re:That's just what we need!

[g0at (135364)]

eludes [sic]

Actually, the article suggests just the opposite!

-b

Re:That's just what we need!

[ackthpt (218170)]

Free online storage from a company that can't keep their documents safe from prying eyes -- including the document that eludes to the fact that they're offering free online storage.

Yeah, but just think, your stuff would be blocked from anyone in China.

Re:That's just what we need!

[fermion (181285)]

It's not so much that Google can't keep documents from prying eyes, it is that they are in the bussiness of selling ads, and one way they get people to look at the ads is to actively prying open documents to index and match to advertisers. For istance, Google mail works by matching ads to the content of the mail. Your privacy is not specifically violated, but googles still gets to index your information and match it ads. Also there is no guarantee that personal information or corporate secrets won't someday be revealed.

Likewise, the storage scheme will be the same thing. Google now gets to look at your entire life, and figure out how which of thier clients can help you with your lifestyle. Again, your privacy may no be specifically violated, at least in the near term, but it is still too much of a price for me to pay, when i can get the same thing without the risks for $10 a month.

Re:That's just what we need!

[electroniceric (468976)]

My guess is that Google sees document storage as a beachhead for online word processing, etc. Convincing a business to adopt that kind of stuff will be very hard, because they have to change how their processes work. But if you're an indivudal logged into GMail, and you have a Word doc (or even better, a PDF) or some photos you want to edit and send back to someone, and a link saying "Edit this document" comes up, you might well want to do that. And because they're on Google's servers, it doesn't cannibalize their ad-based business model, and better still, it does cannibalize Microsoft's business model. Basically, by starting with documents, they can move piecemeal into application hosting without losing many options. Then if businesses are interested, they sell ad-free versions, hosted or non-hosted.

Re:That's just what we need!

[iamlucky13 (795185)]

Funny, but also a good point. However, I do have a fair number of relatively low security risk files that it would be handy to access anywhere without carrying them on a flash drive. Flash drives are useable almost everywhere, but not quite, and they can get lost, which makes them as much or more of a security risk as files on a fileserver. I actually save a bunch of miscellaneous bits of information as drafts on my gmail account for convenience, but it would be nice to do so as something other than plain text. I'm pretty sure I'm not alone.

One would also expect that a google online drive would be roughly as secure as their mail account (same username and password, potentially different avenues for hacking, however). Email security is pretty important, so if a person is willing to trust their personal communications to Google, why not a few files? Besides, it's probably a lot more secure than the average user's personal computer.

It slipped out

[truthsearch (249536)]

Let's hope the stuff from your GDrive doesn't end up all over the internet like this presentation!

Re:It slipped out

[ROOK*CA (703602)]

Personally I'd probably use something like this to backup all my media files (Songs, Movies, Audiobooks, etc.,) In which case who cares if it ends up all over the Internet, Sharing is good, sharing MP3's, well that's even better. :)

Re:It slipped out

[GigsVT (208848)]

That raises an interesting possibility. If you upload a file to Google that they already have in someone else's gDrive, there's no need for them to keep two copies of it.

Reminds me of way back when on AOL when AOL would store internal email attachments on their servers. "Pirating" something just meant forwarding an email with the attachment that never hit your local computer, drastically reducing the time required since everyone was on slow modems back then.

It will be funny when the first SHA or MD5 colli

Why give everything to google?

[IntelliAdmin (941633)]

The most interesting part of this story is this line: "With infinite storage, we can house all user files, including emails, web history, pictures, bookmarks, etc and make it accessible from anywhere (any device, any platform, etc)," the notes in the original Google presentation state. Chief Executive Eric Schmidt in his presentation made a cryptic comment that one goal of Google was to "store 100 percent" of consumer information." Now, this service might just be vapor. But if it is real. Why would I want to give all my very personal information to a potential advertiser? It makes me cringe all of the suckers out there that will store their private word, excel or other docs and have no idea how insecure it is.

Re:Why give everything to google?

[Reality Master 101 (179095)]

Obviously Paranoids won't bother to use this service.

But for the rest of us, the idea of a cheap online backup (or even free, which would Rock Hard) of our ENTIRE hard drive would be very, very nice. It would be cool if Google provided automatic encryption, but I wouldn't care if they didn't.

Re:Why give everything to google?

[TubeSteak (669689)]

Even if they do provide encryption, nothing is stopping a 3rd party from writing up their own encryption overlay.

Your encryption + their encryption = fuck the police

Re:Why give everything to google?

[Breakfast Pants (323698)]

You know, if you ever get divorced you can at least wipe your porn off of your computers in case that comes up as an issue. It isn't clear that you will be able to do so with such a service from Google. Also, every bit of communication you made with your extra-marital lover over gtalk will be available as well (I know, I know, you can opt out of this bit).

Re:Why give everything to google?

[Telastyn (206146)]

As opposed to trusting all of the intermediaries between you and google? Personally, I trust google to protect my privacy far more than say... Comcast, who has direct unencrypted access to every non-ssl web browsing session, gmail use, or email sent.

Re:Why give everything to google?

[garcia (6573)]

Why would I want to give all my very personal information to a potential advertiser? It makes me cringe all of the suckers out there that will store their private word, excel or other docs and have no idea how insecure it is.

Because most people see that getting something "free" in return for giving up their personal information is worth it. Hell, there have been countless "studies" that asked people for their personal identifiable information including mother's maiden name and birthdate with nothing more t

Re:Why give everything to google?

[slashdot.org (321932)]

That's what things like Truecrypt [truecrypt.org] are for.

Of course the majority of people will not use this and happily hand over all their private information...

Didn't we have this in 1997?

[cjsnell (5825)]

XDrive, Yahoo Briefcase, anybody?

Of course, we had Web-based e-mail in '96, too, and look what Google did with that.

Re:Didn't we have this in 1997?

[hal9000(jr) (316943)]

XDrive, Yahoo Briefcase, anybody?

Dude, get on the fan-boi band wagon. It doesn't matter if anything came before. If google does, it will be "better."

Seriously, this might be useful but I would definently want to encrypt that data. It still doesn't obviate the need for local back-ups. My data back-ups are routinely over 4GB is size. No way am I tranporting that up my stinking little DSL connection. But I could see a use for those few must have docs.

Their Objective

[rolfwind (528248)]

From the article:

"With infinite storage, we can house all user files, including emails, web history, pictures, bookmarks, etc and make it accessible from anywhere (any device, any platform, etc)," the notes in the original Google presentation state.

Chief Executive Eric Schmidt in his presentation made a cryptic comment that one goal of Google was to "store 100 percent" of consumer information.

What is so damned cryptic about that? This has been google's strategy from the beginning, the more info they have about you, the users - the better they can market to you, the users.

I would be worried, of course, about the obvious bad possibilities that can from from this unprecedented access this gives google to our info. But that discussion has been played out with every google took.

Re:Their Objective

[xiphoris (839465)]

This has been google's strategy from the beginning, the more info they have about you, the users - the better they can market to you, the users.

If you take the pessimistic stance that marketing will always happen, regardless, then at least in this scenario you receive marketing that might actually interest you instead of, oh, I don't know, notification about a new brand of tampon (the sorts of adverts that I always see on TV for some reason).

For example, Google would know that by reading Slashdot, you must be male, and automatically exclude you from receiving such misdirected advertisements. Likewise, if Google were in control of all the advertising, the Slashdot crowd would never get another v14gr4 ad again! (since they have no use for it) :-)

Google's Plans

[sepharious (900148)]

I've said it before and I'll continue to say it, Google has BIG plans that everyone is not piecing together. Long story short, I expect to see Google linux sometime within two years (I'd wager this year). This distro will be intimately linked with the online side of Google for storage and software. This will mean that you can go from your PC at home to any webbrowser on the face of the planet and have all of your information as it would be on your own desktop. ALSO, there's a possiblity of seeing something like Sun has where you can have a desktop open with programs, web pages, and files and then go to another PC and have the same desktop open from either a webbrowser or a future version of Google desktop. What do you think all those mobile computing boxes and dark fiber are for? It's all to make Google local to everyone and very very fast. Wait and see.

Google Live CD

[this great guy (922511)]

And here is the quicker: Google could do that by releasing their Linux Distribution on a Live CD. Users would not even have to install Linux, instead they would merely boot on this Live CD. The environment would be heavily linked to the on-line Google services, and users could edit/modify/save their document transparently over the Internet.

Google Firefox

[vinn01 (178295)]

Not only Google Linux..

Prediction: Google will create it's own version of Firefox with one distinguishing feature: no address bar.

Google hates the address bar. They want everything to go through their search box (like the Google toolbar). Solution: get rid of the address bar. Have the search box do an automatic "I feel lucky" search if you type in a URL.

Watch the Google ad revenue grow when Google knows every URL that you type, in addition to your every search.

Gmail Space Firefox Extension

[Slant675 (168902)]

This will be interesting to see if this provides as much space as the Firefox [getfirefox.com] extension [mozilla.org], Gmail Space [mozilla.org] provides. The way it works, apparently, is to allow access to the file attachment method used by Gmail [google.com], providing an interface which appears to be like a file management interface. Very useful!

Hopefully Google will be good and provided enough space to make hacks like this obsolete. Not that they are bad, just inconvenient!

Here's the deal

[mslinux (570958)]

As soon as Google gives me all of their data, I'll give them mine.

Re:Here's the deal

[Petronius (515525)]

They already have yours.

In the meantime

[Johnso (520335)]

Until Google offers this service, feel free to upload all of your confidential files to my server:

66.35.250.150
User: ident
Pass: itytheft

I'm happy to be of service!

Re:In the meantime

[baldass_newbie (136609)]

This [samspade.org] is what makes the parent even funnier.

Re:In the meantime

[mjeppsen (621795)]

I tried to upload my secret data, but I couldn't connect...

Damn, already slashdotted!

-MJ

scary

[pvt_medic (715692)]

any one find the followig line a little scary.

"one goal of Google was to "store 100 percent" of consumer information."

Im sorry there just some of my info I trust to ME, MYSELF, and I.

gdrive.com

[pvt_medic (715692)]

A quick search on gdrive.com comes up with this info.

Registrant:
Data Docket Inc. (DOM-1291683)
391 N Ancestor Pl.
boise ID 83704 US

Domain Name: gdrive.com

Registrar Name: Markmonitor.com
Registrar Whois: whois.markmonitor.com
Registrar Homepage: http://www.markmonitor.com/ [markmonitor.com]

Funny note would be that the markmonitor website is about making the internet safer for your business. I cant see how the proposed gdrive would do such a thing.

GMail is already online storage

[digitaldc (879047)]

2GB to be exact, the only drawback is that Google can read each and every one of your emails.
When you learn that fact, it makes it less attractive.

Re:GMail is already online storage

[stunt_penguin (906223)]

So you think that a random Google employee has access to your inbox do you?

No-one at google reads your, mine or anyone else's email.

They're scanned for keywords by a machine and spat out into your browser. The same goes for your search results, too.

There's a big difference between someone reading your emails like some kind of wartime censor and a script running on a machine that adds contextual information. Do you object to Google adding BR tags to your email where it sees a carriage return tag (or whatever) in an incoming email. Are they 'reading' your mail then?

*walks off mumbling about paranoid americans*

Re:GMail is already online storage

[Jugalator (259273)]

You mean, like no ISP or other webmail service can? No wait...

Rapid sharing?

[RyoShin (610051)]

One has to wonder what, if any, restrictions Google has in place to keep GDrive from becoming a file sharing network, assuming it will actually come out.

Even if shares are only 2 GB (about the size of their e-mail accounts), that's still enough for at least one good-quality movie, or 100+ high quality MP3s. All one would need to do is set up a drive and disseminate the login info.

And what about legit use? I rip all my CDs to MP3s (because changing CDs when you get tired of them is a nuisance). My business allows me to store MP3s on my computer for personal use, but I cannot bring a flash drive or other writeable media (including CD-Rs) into the workplace. (Yes, having internet access kind of dilutes this, but I digress.) It would be easier for me to upload as many songs as possible and download them at work instead of trying to convince someone that my flash drive just has MP3s on it.

Maybe they can outright ban certain file types- mp3s, avis, etc. Of course, there's nothing stopping someone from uploading it as spiderman3.doc. And what about the college student that wants to upload a class lecture for later listening or sharing?

If this becomes a reality, it would be interesting to see how they work it.

As apps go online, does plain storage lose value?

[lux55 (532736)]

Let's see if they add much in the way of web-based features (ie. more than just a download and "email this file" UI), or if it's just like other traditional services. For my opinion of why over time, people will want more than that (although most people will use a service from someone as large as Google anyway):

http://www.putfwd.com/index/news-app/story.35/titl e.an-online-file-storage-manifesto [putfwd.com]

Let's hope for at least a developer API so external apps can integrate with it.

Previous Solutions

[Midnight Thunder (17205)]

I have seen a number of companies in the past offer such services and then they either changed so you had to pay for their services or disappeared. Part of the problem was that, while many offered good solutions, they were often plagued by people using them for pr0n or other illigitmate content. This had the effect of using more bandwidth and storage which they could afford.

Another thing is that many of them were purely web based, and did not neccessarily offer anything like WebDAV to make it easier to transfer the files.

This is not to say that Google will go the same way, but that something will have to happen to avoid the same issues.

Encryption plugin

[tacokill (531275)]

So who is going to be the first to create a plug-in that auto-encrypts what it sends and auto-decrypts what it receives - from Google?

That would be sweet to have client side encryption "built in" to whatever the client ends up being. But from the sound of this article, it's probably more like "hacked in" instead of "built in". After all, Google wants to READ what you store....

Bandwidth is the real issue

[Drestin (82768)]

No one seems to have mentioned the problem with adaption of this is the restrictions on upload bandwidth. Even the highest speed home broadband service offer terrible upload speeds. I've got the best Comcast is beta-testing today (16M down/1M up) and it's WAY too slow to be keeping the 600 gigs of stuff on my HDs online. I regularly churn up to 20 gigs in a day. Even the Verizon FoIS is only 2M up at best.

When it takes X long to download that nifty video and then takes 16x as long to mirror it up to your GDrive and all the while your latency is shot to hell and even your Download speed is affected... not worth it. As others have noted: think XDrive or Yahoo Briefcase or other similar functions. Myself, I'm quite happy with the 2Gb SanDisk USB device I keep on my keychain...

AND, of course, there is that pesky privacy issue...

Re:This already exists...

[ZeroExistenZ (721849)]

How come I don't trust signing inthere?