{"id":579,"date":"2016-11-07T04:03:08","date_gmt":"2016-11-07T04:03:08","guid":{"rendered":"http:\/\/mrbiggs.net\/ron\/?p=579"},"modified":"2017-01-05T20:21:12","modified_gmt":"2017-01-05T20:21:12","slug":"hillarys-e-mail-question","status":"publish","type":"post","link":"http:\/\/mrbiggs.net\/ron\/?p=579","title":{"rendered":"Hillary&#8217;s E-mail Question"},"content":{"rendered":"<p>I should begin by saying I generally don\u2019t consider issues like this \u201c30,000 emails\u201d thing.\u00a0 I consider them theatrics for the masses, much like a politician\u2019s sexual details or tax returns.\u00a0 That being said, I\u2019ve been running Exchange (Windows) mail servers for the past 15 years so I know a thing or two about how mail servers are run.\u00a0 So watching this whole issue unfold brought up some interesting issues for me, with our government, with Hillary, and with what changes really need to happen in 2017.<\/p>\n<p>The tipping point was when my wife and I were listening to an episode of\u00a0<a href=\"https:\/\/www.thisamericanlife.org\/radio-archives\/episode\/601\/master-of-her-domain-name\">This American Life<\/a> which was trying to justify Hillary\u2019s private e-mail server.\u00a0 The basic premise was that this private e-mail server wasn\u2019t some Machiavellian scheming on Hillary\u2019s part, it was just a certain cluelessness and carelessness about a technology that the government hadn\u2019t really adopted yet. I\u2019d read some other justifications, like that it\u2019s accepted protocol to destroy an old phone with a hammer.<\/p>\n<p>First I\u2019d like to debunk some of these justifications.\u00a0 And first among those is smashing a phone with a hammer.\u00a0 This is not just untrue, it shows real stupidity on the part of whoever decided to smash it.\u00a0 Smashing a phone will just smash the plastic and glass, more than likely it won\u2019t smash the flash memory on which sensitive data may reside.<\/p>\n<p>Of course, in the private sector, business e-mail needs to be encrypted on a phone in such a way that it can never be retrieved if someone were to get the phone.\u00a0 It technically doesn\u2019t even sit on the phone.\u00a0 And if a phone is stolen, the e-mail administrator has the ability to remote wipe it.\u00a0 If you\u2019d like to know more about that you can check out <a href=\"http:\/\/www-03.ibm.com\/security\/mobile\/maas360.html\">IBM\u2019s MaaS360<\/a>.<\/p>\n<p>Second was Ira Glass\u2019s charge that a lot of government officials use private e-mail accounts, citing Colin Powell\u2019s use of an AOL account.\u00a0 Now let\u2019s get this straight, there is a huge difference between using a personal commercial e-mail address and hosting your e-mails on your own server.\u00a0 An AOL account can be subpoenaed.\u00a0 AOL follows proper data storage protocols, they can pull up any and all e-mails that ever went through their organization.\u00a0 If Colin Powell were under investigation for something, the FBI could gain access to this.<\/p>\n<p>Not only that, this is a compliance requirement of all private sector businesses.\u00a0 I\u2019d like to introduce you to an appliance I have personal experience with \u2013 the <a href=\"https:\/\/www.barracuda.com\/products\/messagearchiver\">Barracuda Message Archiver<\/a>.\u00a0 All businesses with compliance requirements need something like this.\u00a0 Any e-mail that goes in, out, or through the company gets passed through this archiver, to be stored for eternity.\u00a0 Nobody gets away with deleting anything.<\/p>\n<p>This is in addition to backups.\u00a0 Without regular backups, Exchange simply doesn\u2019t work.\u00a0 You could technically skimp on the backups and keep a short retention history, but you can\u2019t do that with the archiver.<\/p>\n<p>So, my understanding is Hillary\u2019s team made backups, even offsite backups, but didn\u2019t archive.\u00a0 The only way this could result in so many e-mails being deleted by chance\u00a0is with\u00a0some combination of deleting e-mails as they come in, and having a very short backup retention policy.\u00a0 Which, if you\u2019re going to keep backup retention\u00a0that short, why even have them offsite?<\/p>\n<p>Okay, so you see where I\u2019m going with this?\u00a0 Two possible stories surface here, both of which spell something scandalous.<\/p>\n<ol>\n<li>The traditional story that Hillary\u2019s camp purposely used a private e-mail server so they could write each other e-mails outside the realm of scrutiny, knowing what they were doing was illegal.<\/li>\n<li>Government agencies do not have the compliance requirements of the private sector, which puts\u00a0them above the laws they create. Hillary\u2019s team\u2019s carelessness about this is just a symptom of a much larger issue with a\u00a0public sector that needs a tech overhaul.<\/li>\n<\/ol>\n<p>Either story speaks of a scandal.<\/p>\n<p>A quick way to vet which story is true is to find out what other senators, candidates, or any political officials run their operations with a private e-mail server.\u00a0 But I have a hunch Hillary\u2019s camp is unique in this behavior.\u00a0 Really, e-mail is so much more complicated than a server.\u00a0 Maybe 15 years ago we could get away with a simple server but we\u2019ve been in the era of strict compliance and sophisticated spam filters for years now.\u00a0 We generally talk of e-mail more in terms of systems than servers.\u00a0 I haven\u2019t even gotten into so many of the other features we have to keep in our e-mail organization.\u00a0 Really, unless you\u2019re an organization of at least a thousand people, it\u2019s more efficient to outsource it.<\/p>\n<p>Unless you have something to hide.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I should begin by saying I generally don\u2019t consider issues like this \u201c30,000 emails\u201d thing.\u00a0 I consider them theatrics for the masses, much like a politician\u2019s sexual details or tax returns.\u00a0 That being said, I\u2019ve been running Exchange (Windows) mail servers for the past 15 years so I know a thing or two about how [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[7,358],"tags":[312,353,354,352,350,356,351,349,348,355],"_links":{"self":[{"href":"http:\/\/mrbiggs.net\/ron\/index.php?rest_route=\/wp\/v2\/posts\/579"}],"collection":[{"href":"http:\/\/mrbiggs.net\/ron\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/mrbiggs.net\/ron\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/mrbiggs.net\/ron\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/mrbiggs.net\/ron\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=579"}],"version-history":[{"count":2,"href":"http:\/\/mrbiggs.net\/ron\/index.php?rest_route=\/wp\/v2\/posts\/579\/revisions"}],"predecessor-version":[{"id":581,"href":"http:\/\/mrbiggs.net\/ron\/index.php?rest_route=\/wp\/v2\/posts\/579\/revisions\/581"}],"wp:attachment":[{"href":"http:\/\/mrbiggs.net\/ron\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=579"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/mrbiggs.net\/ron\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=579"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/mrbiggs.net\/ron\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=579"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}