Profile

Cover photo
Yassir Abousselham
809,417 views
AboutPostsCollectionsPhotosVideosReviews

Stream

Yassir Abousselham

Shared publicly  - 
 
Great post on Privacy at Google. I wish more companies invested as much efforts in protecting user data. 
 
After being asked personally a few times and reading claims by others a few more, I thought I'd set the record straight....

Working at Google does not give you access to the data of users!

It's an easy assumption to make.  After all, most companies don't put internal access controls on data making it easy for every employee to access everything inside the firewall.  Google does not work that way.

Though there are many groups at Google, we'll simplify it into Software Engineering ("SWE") and Site Reliability Engineering ("SRE").  I was the latter for 5 years and I've been the former for 3.

SWE, in general, has access to nothing.  They run their code on their own workstations and sometimes test clusters with test data.  A few get access to anonymized user data for their service -- more on that later.

SRE is the group that owns the keys to the kingdom.  They're the group (actually many small groups) responsible for running Google services "in production".  They almost always have access to anonymized user data for their service and the ability to access "raw" logs if necessary, again for only their service.  The kicker is that, since around 2011, this latter access comes through a specific interface where you must explain with each request why you're doing this.  All those actions are logged and those logs are audited.  Misuse of the access will get you fired.

What is "misuse"?  I can't even look up my own queries.  I could be on-call for my service, have you on the phone fixing a problem with you saying, "go ahead" , and I still couldn't do it.  In five years, I only used raw logs twice, both on myself during training just so we'd know how.

So, for any given service, there may be somewhere between 10 and 100 people worldwide who could potentially access Personally Identifiable Information ("PII") of a user, but doing so without a good reason would be the end of them at the company.  And should that abusive employee somehow cause "material damage" to the company...  I don't even want to speculate.

On top of that, any attempt to track a single user, whether the user can be identified personally or not, will also get you fired.  Every user with any form of logs access has signed a paper (real paper, even) stating that they understand all this and the consequences.

This is serious stuff.  My own team would turn me in without a second thought if I did any of this.  And I'd do the same to them.

What are "anonymized" logs?  They're the requests that have had all PII stripped.  No IP address.  No account identifier.  No geo-locating finer than the city, etc.

Disclaimer:  I work for Google (obviously).  These thoughts are mine and mine alone.  Mine, I tell you!  Mine!!!
98 comments on original post
1
Add a comment...

Yassir Abousselham

Shared publicly  - 
 
 
This is an incredibly dangerous selfie, but at least they're getting their potassium: http://on.mash.to/1q2asoK
45 comments on original post
1
Add a comment...

Yassir Abousselham

Shared publicly  - 
 
Emerald Bay panorama.
2
Add a comment...

Yassir Abousselham

Shared publicly  - 
 
What would you want to tell your future self?
Write a letter to your future self. It's easy and fun. Millions of letters written! Please choose a date at least 1 month from now. Your letter can't be blank. Please enter a valid email address. When would you like to receive this letter?
2
Add a comment...

Yassir Abousselham

Shared publicly  - 
2
nerza rodriguez's profile photo
 
Great surprise
!!!
Beau choco
Add a comment...

Yassir Abousselham

Shared publicly  - 
 
I can't wait to get my hands on one of these :)
1
Add a comment...

Yassir Abousselham

Shared publicly  - 
 
 The Google design team did a great job on the explaning the rationale behind the new identity. A must read for design pros.
At Google we say, “Focus on the user and all else will follow.” With this in mind, we seek to design experiences that inspire and enlighten our users.
1
Add a comment...

Yassir Abousselham

Shared publicly  - 
3
Add a comment...

Yassir Abousselham

Shared publicly  - 
 
Emerald Bay beach.
2
Add a comment...

Yassir Abousselham

Shared publicly  - 
 
Bay Bridge on a cloudy day. 
2
1
Add a comment...

Yassir Abousselham

Shared publicly  - 
 
Motorola, doing the best impression of a rockstar that it can, wants us all to get tattoos and take pills instead of type out passwords.
1
Add a comment...

Yassir Abousselham

Shared publicly  - 
 
You still have a few hours to upload your video for a chance to win.
1
Add a comment...
Yassir's Collections
Links
Other profiles
Basic Information
Gender
Male
Public - 5 months ago
reviewed 5 months ago
Public - a year ago
reviewed a year ago
One of the last true coffee shops in the area. Friendly staff, relaxing atmosphere and good food.
Public - a year ago
reviewed a year ago
17 reviews
Map
Map
Map
Public - a year ago
reviewed a year ago