[SGVLUG] LA City councilman notes issues with Google email security

[Dan Kegel]

I'm not even quite clear what security features LA is
asking for.  The closest info I've found is
http://articles.latimes.com/2010/nov/03/business/la-fi-google-la-20101103
which says
'[In August, 2010], city officials said, they were surprised to
find that the system had to address federal requirements
for "securing law enforcement information on criminal activity."'

Maybe it's something like the HIPAA health care situation.
https://www.infosecisland.com/blogview/14328-HIPAA-Compliance-and-Cloud-Security.html
mentions a few possible issues, including "limiting access to some
information by IP address".

I see Google did add two-factor authentication recently,
http://googleblog.blogspot.com/2011/02/advanced-sign-in-security-for-your.html
so that's probably not it.
- Dan

On Mon, Oct 24, 2011 at 12:15 AM, Christopher Smith <cbsmith at gmail.com> wrote:
> It's the usual game of "bureaucrats add new requirements to justify
> their existence, and large computer Juggernaut doesn't understand why
> it should bother".
>
> --Chris
>
> On Sun, Oct 23, 2011 at 11:05 PM, matti <mathew_2000 at yahoo.com> wrote:
>>
>>
>> interesting:
>>
>> L.A. councilman: Google 'unable to meet' security needs of city email
>> October 21, 2011 |  1:13 pm
>>
>> http://latimesblogs.latimes.com/technology/2011/10/la-councilman-google-system-unable-to-meet-security-needs-of-city-e-mail.html
>>
>> I am not certain what securities issues they are talking about,
>> suspect it maybe more of a legal discovery thing.
>>
>> Any thoughts?
>>
>> thanks
>> matti
>>
>>
>
>
>
> --
> Chris
>