NSA: Please Turn off the Lights When You Leave. Nothing to See Here.

Linux Advocate Dietrich Schmitz shows how the general public can take action to truly protect their privacy using GnuPG with Evolution email. Read the details.

Mailvelope for Chrome: PGP Encrypted Email Made Easy

Linux Advocate Dietrich Schmitz officially endorses what he deems is a truly secure, easy to use PGP email encryption program. Read the details.

Step off Microsoft's License Treadmill to FOSS Linux

Linux Advocate Dietrich Schmitz reminds CIOs that XP Desktops destined for MS end of life support can be reprovisioned with FOSS Linux to run like brand new. Read how.

Bitcoin is NOT Money -- it's a Commodity

Linux Advocate shares news that the U.S. Treasury will treat Bitcoin as a Commodity 'Investment'. Read the details.

Google Drive Gets a Failing Grade on Privacy Protection

Linux Advocate Dietrich Schmitz puts out a public service privacy warning. Google Drive gets a failing grade on protecting your privacy.

Email: A Fundamentally Broken System

Email needs an overhaul. Privacy must be integrated.

Opinion

Cookie Cutter Distros Don't Cut It

Opinion

The 'Linux Inside' Stigma - It's real and it's a problem.

U.S. Patent and Trademark Office Turn a Deaf Ear

Linux Advocate Dietrich Schmitz reminds readers of a long ago failed petition by Mathematician Prof. Donald Knuth for stopping issuance of Software Patents.

Showing posts with label GoogleTalk. Show all posts
Showing posts with label GoogleTalk. Show all posts

Sunday, May 26, 2013

Red Flag Privacy Warning: Google+ Hangout Has Gone Proprietary

by Dietrich Schmitz

It is readily understood how Free and Open Source can be a really good thing.

After all, isn't the notion of Free and having the ability to share worthwhile?  We see it every day in action, not just with FOSS and it is a human tendency to want to share and doing things which don't exact a cost also makes doing things possible that might not otherwise happen.

The idea that FOSS is a good thing also pairs up with another concept: Transparency.

Being able to share code is not only good because many people can reuse, change and share code, it's also a good thing because FOSS allows anyone to 'see' the code.  Thus, we have a natural way of having a cross-check or 'oversight', if you will, on what is or isn't being done with code development.  It is this very transparency that we have come to accept as being what sets FOSS apart from proprietary code.  Exploitation is less likely to occur if 'many eyes' can see/review source code and recognize when exploit code is being inserted and block such code from being included in a FOSS project.

One by-product of proprietary code is that only the owners of said code can see what is in the source so as to understand what is assumed to be happening.  The majority of users of proprietary code are left at an intentional disadvantage in not being able to see how a given software application was written.

For the developer that confers certain advantages, but, one of many possibilities is that how code is written might have some form of built-in exploitation which in the eyes of the general public is considered unacceptable.  There is no way of knowing whether when you place 'trust' in a proprietary software program if it is truly doing the right things.  You can only make assumptions and guess.

So when you see in the news stories like Google taking their Google+ Hangouts proprietary, removing open source, open protocols like XMPP, it's a warning signal to which you should pay attention.

Transparency is being taken away in small amounts by adding proprietary code.  Now, Google+ Hangouts defaults to falling into the same category as Microsoft's Skype.

There have been many recent accusations that Skype has built-in 'backdoors' which allow a third-party bridging the connection to eavesdrop on your Chats and audio/video conference calls.

This should be a BIG concern for everyone.  Google has removed transparency from a major component used by millions in electronic communication.  Google+ Hangouts is proprietary and there is now NO Transparency.  No one except Google knows how the code is written or what it does or doesn't do.

Up to the announcement of Google+ Hangouts on May 15, 2013, I was a big proponent of Google+ because it used the open protocol XMPP.  Now, we have a surprise change made to remove Google Talk and Hangout will not support any form of Federated communication.

For your purposes that means that no third-party communication tools will be allowed to plug into the Hangouts proprietary communication pipeline whatsoever.

So, when is a little bit of proprietary too much?  Here's your example.

I am going to do something about it and I hope you will too.

-- Dietrich
Enhanced by Zemanta

A Breach of Public Trust: Proprietary Google+ Hangouts

by Dietrich Schmitz

By all accounts, Google I/O 2013 was a relative success, but with one exception: Google+ Hangouts.

The battle cry for action was sounded on the announcement that Google will dismantle the much-praised Google Talk which runs on an open protocol Jabber/XMPP in favor of proprietary protocols all running under the branded label Hangouts.

Even I was taken by surprise by the announcement, merely thinking that Google was being ambitious in their redesign of Google+ which  coincided with the opening of this year's Google I/O extravaganza convention.

As it turns out, XMPP will stay around for a while but will eventually sunset in favor of Hangout.

So, what does this mean for Google?  And what does it mean for you the reader who rightly cherishes choice and open standards such as XMPP?  This decision represents a total close-down with no Federated messaging protocol support.  That means you can't use other messaging tools to get plugged into their proprietary Hangout protocol for any form of communication whatsoever.

Will our collective voices be heard?

I am afraid that this turn of events is more dubious than it appears on the outside.  There was no discussion prior to the announcement by Google in an attempt to share their vision with the general public.

Should they have shared information with the public to obtain consensus before reaching such a decision?  I submit the answer to that question is an emphatic yes.

We all, myself included, try really hard to support Google in their initiatives whatever they may be.  But this time around, I am having a difficult time reconciling what has happened.

It's a wholesale shutdown of an open protocol in favor of an as of yet fully disclosed proprietary protocol, which, I am afraid is woven with H.264 to obtain maximal bandwidth advantage.  I mean, the 'X' in XMPP means 'extensible', right?  So, why not improve upon XMPP and fill in those technology gaps?  Instead, choosing a proprietary solution is a step backward and clear violation of the public trust that users have placed in Google.  That trust is now broken whether they realize it or not.

I don't like being forced to make choices but in this situation, I am afraid I need to decide where I stand on support of their decision.

The only vote I have is to decide whether I use Google+ at all.  I have control over that.  Even using Google Blogger, I now find myself feeling quite conflicted.

If Google isn't careful, they will find themselves in a landslide shift as users move away from Google+, worse, away from supporting Google entirely.  I really don't want to do that, but I am afraid this is the only choice I can make to vote my disfavor for their poor decision making.

The hardest part is losing contact with all my friends which I have made since G+ opened.

What to do (taps fingers...).  Live by one's principles?  Or, let them be compromised?  That is the choice each of us must consider here.  I must do something.  Soon.

-- Dietrich


Enhanced by Zemanta