" google Archives - HIPAA News, Web & Email Security Tips & News - Plus More | LuxSci
LuxSci

Posts Tagged ‘google’

A Comparison of Email Backup Policy of Popular Email Services

Wednesday, November 1st, 2017

Do you use email backup in your practice? Make a smart choice by comparing the backup policies of popular email solution providers.

Privacy concerns are constantly rising especially following the revelations by Edward Snowden. Now, the big question is “Do the popular email services in the US retain your data forever?” In order to find an appropriate answer, we examined the email backup policies of 7 popular providers.

Data breaches and privacy concerns make headlines for they have a direct impact on an individual’s private life. Going by the news of mass surveillance by government authorities, it is natural for you to be extra cautious about protecting your privacy. After all, nobody wants to get exposed although a bit of exhibitionism resides in each of us.

Email backup and restore solutions

The US government is pressing technology giants to reveal what they have in their “box” (or your inbox). Apple reported that it received the highest number of security requests for data from the US government this year.

Considering the “attacks” from both the government and hackers, it is imperative for you to learn how these email services ensure that your data remain safe.

Read the rest of this post »

What’s the latest with HTTPS and SSL/TLS Certificates?

Wednesday, August 2nd, 2017

We’ve written quite a lot in past FYI Blog posts about SSL/TLS certificates, the critical building block to secure communication on the Internet. We described what such certificates were, their use in securing the communications channel between a client (browser) and a server, different types of certificates and the pros and cons of using each.

Given the changes in the Internet landscape over the past five years, we feel it is time to revisit these topics. The technical details described in the earlier posts remain unchanged. What has changed, though, are the traffic patterns for HTTPS-based communications, additional vulnerabilities arising as a consequence and ways to mitigate these. This post will provide a general overview of certain changes in the Internet landscape over the past few years, while subsequent blog posts will describe some of the topics identified here in greater detail.SSL TLS Certificates

Read the rest of this post »

Google to Strip Trust from Symantec SSL Certificates

Tuesday, March 28th, 2017

Last Thursday, a Google developer announced that Chrome will be reducing its levels of trust in Symantec issued SSL certificates, as well as those issued by its subsidiaries. This comes after a two year skirmish between the two companies, with Google asserting that Symantec has continually failed to follow appropriate verification practices.

Under Google’s proposal, the Extended Validation status from Symantec issued certificates will be removed, the validity period of newly issued Symantec certificates will be gradually reduced to a maximum of nine months, and current Symantec certificates will be incrementally distrusted with each Google Chrome release up to 64. These measures aim to balance out compatibility problems alongside the security risks.

Symantec SSL Certificate

Read the rest of this post »

eBook: HIPAA-compliant Email Basics

Thursday, February 25th, 2016

Safeguarding Your Healthcare Practice and Protecting Patient Privacy

Book 1 in the LuxSci Internet Security Series.

Created by Erik Kangas, PhD

This LuxSci eBook is your well-researched guide to both a critical understanding of the specific issues and concepts of HIPAA, HITECH, and the Omnibus rule, and their practical application to your business with respect to email, so that you stay compliant with these government standards. This document will provide a framework for your health care entity to keep the privacy of patient information front and center. Providers will have the necessary tools to meet all requirements established by HIPAA to access email outsourcing services.

This eBook includes sections on:

  1. Overview of HIPAA
  2. What is ePHI?
  3. Provisions of the HIPAA Email Security Rule
  4. Additional Risk Analysis and the Need for Encryption
  5. Gmail and Google Apps?

Download the eBook

LuxSci as SMTP Relay for Gmail = LuxSci Encryption for Google

Monday, June 8th, 2015

Gmail and Google Apps users can route their outbound email through LuxSci to take advantage of SecureLine email encryption, which enables HIPAA compliant sent messages, plus LuxSci’s extensive outbound email management tools.  If you prefer the Google interface or need to use it for some reason, but require encryption and/or compliance, you can meet your needs by adding on LuxSci.

Google Apps

Read the rest of this post »

New SSL Certificates, SHA256, and Backwards Incompatibility: What to Do?

Wednesday, October 22nd, 2014

Thanks to Google,” web sites around the world are updating their SSL certificates to use a newer “hashing” algorithm called “SHA256”.  Indeed, all new SSL certificates that LuxSci obtains for its customers will use SHA256, going forward (unless you don’t want that).

Read on to discover why this change is happening, what it means, why everyone is upset with Google for forcing the issue, and what your options are.

What’s the problem?

SHA1 is a method for making digital signatures and is used in the SSL certificates by most sites on the web.  There is currently no security issue with SHA1 and computer power is not expected to be sufficient to “crack” SHA1 until sometime in the 2020s.  In fact, Microsoft has stated, and the Internet community has agreed back in 2013, that it should be phased out by 2017 … well before the danger zone and giving folks plenty of time to transition.

Note: There is currently no known issue with SHA1 or any expectation that it is vulnerable or can be compromised now.

Read the rest of this post »

LuxSci takes email privacy seriously … Google owns your Gmail data forever

Wednesday, April 16th, 2014

In recent news, Google is warning consumers that Gmail and google apps are actively scanning your email.

What does this mean?  Google on Tuesday edited its privacy policy to say:

Our automated systems analyze your content (including emails) to provide you personally relevant product features, such as customized search results, tailored advertising, and spam and malware detection. This analysis occurs as the content is sent, received, and when it is stored.

When you upload, submit, store, send or receive content to or through our Services, you give Google (and those we work with) a worldwide license to use, host, store, reproduce, modify, create derivative works (such as those resulting from translations, adaptations or other changes we make so that your content works better with our Services), communicate, publish, publicly perform, publicly display and distribute such content.

Read the rest of this post »

Gmail is Always Playing Catch Up

Monday, April 7th, 2014

In case you missed it, Gmail’s “big announcement” last week was that it would:

  1. Only allow secure (over https / SSL) web connections from users to its servers, and
  2. Make sure that all email traveling between its servers over the Internet uses SSL so it can’t be eaves dropped upon.

This is generally a very good thing.   Its always nice when companies catch up to normal standard procedures by improving their policies.  This makes the Internet an incrementally more secure and safe place.

Just be careful not to give them too much credit as this is really a case of playing “catch up” and not doing anything new or special.  

Read the rest of this post »

Perks of Following LuxSci on Social Media

Wednesday, January 22nd, 2014

LuxSci frequently posts lots of trending topics about the Internet, security, HIPAA, and its own services in this “FYI Blog“.  This information is distributed though many venues, such as RSS feeds, widgets in the member’s web site, and emailed digests that are sent once every week or two.

But, did you know that LuxSci has a social media presence on Facebook, Twitter, and now also on Google+?  Following LuxSci on one of these social media platforms:

  1. Allows you to be notified quickly of any new posts of the FYI Blog
  2. Gives you access to special offers and promotions that are only published to our social media followers
  3. Gives you a lot more news and information with posts and links that are never shared directly through the Blog.

Follow LuxSci:

Follow LuxSci on Twitter Follow on Twitter

Follow LuxSci on Facebook Like on Facebook

Google+ Follow on Google+

Additionally, if you would like to be informed quickly about service status issues, you can follow the LuxSci System Status blog:

 Status on Twitter

 Status via RSS

Secure? Google Mail Getting Increasingly Less Private

Thursday, December 19th, 2013

In the news this week: Gmail is trying to make its web interface faster and a little safer … but are they trading away some of your privacy in the process and making Gmail addresses better targets for email marketers?

What is Google Doing?

Instead of waiting for you to click a “show images” button on every message that is displayed, Google is pre-loading all the images on their servers, scanning for viruses, and then displaying them automatically inline. You can turn this off in your Settings.

On this surface, this gives you:

  1. Images right away — fewer clicks
  2. Safer images — they have been scanned for viruses and malware

Sounds good so far, but…

Read the rest of this post »