Live data from Hacker News

Ask HN: Gmail account security

news.ycombinator.com

471–480 of 807 posts

Re: Ask HN: Gmail account security

#471
Not exactly what the OP is talking about, but I do consulting and have ~5 gmail accounts.

My FAVORITE feature ever is: "huh. You just woke up on a Tuesday and need to get to work? Well, we've logged you out of all your accounts and need you to log in again."

The worst.

Re: Ask HN: Gmail account security

#472
The solution to these kinds of problems is obvious: Stop using any Google service. No more Gmail, Google Cloud, Google Docs, Google Drive, ... there are many alternatives.

I've pretty much completely degoogled my live and don't miss anything.

Re: Ask HN: Gmail account security

#473
post #67

They also do this thing now where they block [1] smaller browsers (even ones using the latest version of chromium) under the guise of security. According to their docs they're fighting MITMs by generally disallowing any browser they can't identify (so the big few). If you're not on a whitelisted browser by Google, you can't log in (effectively, use) any of their properties. This feels very anti-competitive to me. Not…

At work I use Chrome, and I was once using some more obscure features of Google Search to find Microsoft documentation and it (Google) started asking me to verify I wasn't a bot, over and over.

So there's some evidence that this sort of nonsense can be other than malice.

Re: Ask HN: Gmail account security

#474

Once upon a time I worked at Google. I returned to Austin to visit old friends and took the opportunity to visit the Google office there. The Googlers sitting around me were primarily corporate sales. They weren't getting any corporate sales calls at all as far as I could tell, but there was one extremely irate user who was locked out of their GMail account and was repeatedly calling them because they were the only h…

only tangentially related but that phrase is a pet peeve of mine. You are always the product if you are using software - free or paid. Netflix is sure as hell going to use your data the same way youtube would. The only exception of course is most but not all FOSS.

No post body was provided.

Re: Ask HN: Gmail account security

#475

Earlier quoted context omitted.

Hey, cool website !, The mailto: hyperlink on your careers button in the footer, has a typo, namely, "mailto:careers@synth.app&subject=Synth Careers&body=Please attach resume!" It should be, "mailto:careers@synth.app?subject=Synth Careers&body=Please attach resume!" that &subject instead of ?subject is causing that mailto link to not be imported properly by most mail apps, trivial thing, but thought I'd mention it. G…

And replacing the spaces in the subject with %20 will fix it on more browsers, at least it's at the end :)

And providing no email at all and using form submission with captcha will annoy a bunch people but will save you from a lot of spam ¯\_(ツ)_/¯

Re: Ask HN: Gmail account security

#476
post #470

Once upon a time I worked at Google. I returned to Austin to visit old friends and took the opportunity to visit the Google office there. The Googlers sitting around me were primarily corporate sales. They weren't getting any corporate sales calls at all as far as I could tell, but there was one extremely irate user who was locked out of their GMail account and was repeatedly calling them because they were the only h…

You are actually pointing out a tremendous opportunity that Google has internally and externally. I work at Google and recently tried to file a bug about the calculator embedded in search. It was dastardly difficult to find how to file the ticket. It took me maybe an hour. A better system for filing tickets internally and for filing and triaging tickets from external users would be a tremendous asset for Google.

https://issuetracker.google.com/ is supposed to be it, but if it were completely open and easy to use i'm sure they'd need a dedicated moderation team just for filtering the issues. The knowledge and dedication barrier is a frustrating but mostly effective way to weed out those with non-issues or issues that really don't affect them much (however humane you believe that is).

Re: Ask HN: Gmail account security

#477

Earlier quoted context omitted.

Try using a VPN to log in from the location you last used the account

Logging in from a known VPN IP will likely flag the activity as even MORE suspicious from Google's AI's POV.

Perhaps a better alternative than VPN (given it may look suspicious) would be to spin up an $cloud instance at whatever location and using a SOCKS proxy.

I used to do this back in the day to augment my Netflix selection.

Re: Ask HN: Gmail account security

#478

Once upon a time I worked at Google. I returned to Austin to visit old friends and took the opportunity to visit the Google office there. The Googlers sitting around me were primarily corporate sales. They weren't getting any corporate sales calls at all as far as I could tell, but there was one extremely irate user who was locked out of their GMail account and was repeatedly calling them because they were the only h…

only tangentially related but that phrase is a pet peeve of mine. You are always the product if you are using software - free or paid. Netflix is sure as hell going to use your data the same way youtube would. The only exception of course is most but not all FOSS.

I think there’s a difference. “You are the product” means that your usage and data are the primary thing the company develops (with software) so it can be sold to their actual customers, namely, advertisers.

I’ve been involved with many software companies that gather various metrics (analytics, crash logs, user info, etc.) but do not sell that data to anyone. As such, the user is not “the product” but the customer. I think there’s a meaningful difference here.

Re: Ask HN: Gmail account security

#479
post #67

They also do this thing now where they block [1] smaller browsers (even ones using the latest version of chromium) under the guise of security. According to their docs they're fighting MITMs by generally disallowing any browser they can't identify (so the big few). If you're not on a whitelisted browser by Google, you can't log in (effectively, use) any of their properties. This feels very anti-competitive to me. Not…

Google sometimes blocks me from searching using Firefox, saying it’s “suspicious activity” and sending me into captcha hell that always rejects my results after several screens for no reason. It’s incredibly transparent as to what they’re doing. That Google became the most anti-consumer company out there is pretty disgraceful.

I use google constantly— sometimes hundreds of times per day— both logged in and out, almost exclusively in Firefox or Firefox developer edition and I've never encountered this. I'd bank on it being a network thing— VPN, overcrowded proxy, etc.

Re: Ask HN: Gmail account security

#480
post #287

Earlier quoted context omitted.

I did this! Kind of. I bought a domain and was lucky enough to get in to a custom domain email (and more) service with a big company years ago when they had a free version. Unfortunately... it was Google (so kind of hiring the wolf to care for my sheep, as it turns out). And now they're cutting off all of us free tier folks. Which I can't fault them for, but still blame them for. Because I'm petty and entitled or wha…

Same situation here. Have you done the research yet to decide on a new service, or are you planning on starting to pay? For me ideally I would like to move to something else (even paid) just because someday Google deciding to block me for whatever reason scares me quite a bit after having everything for the last decade attached to this account. I would like to export my emails, switch my domain to the new service, an…

Zoho has a free tier that allows a domain.
Post reply on HN