Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

YouTube suspends Google accounts of Markiplier's viewers for minor emote spam

reddit.com

Post reply on HN
Print view View original

61–70 of 101 posts

Re: YouTube suspends Google accounts of Markiplier's viewers for minor emote spam

#61

Post by tahdig »

doopfoopdoop wrote: post #50
tahdig wrote: post #47

Earlier quoted context omitted.

Be careful: By hosting your main email on a custom domain(not a provider) you open a new attack vector for identity theft. Someone can hijack your godaddy/namecheap/gandi account and point the MX DNS records of the domain to their own server and receive all your "Forgot your password? here is the link to reset!" emails This a very bad advice unless you actually know what are the risks.

Is there a good way to protect against this aside from good password hygiene at your domain registrar? I use namecheap if that is relevant--maybe there's a better/more secure registrar to move to. But I guess, equivalently, someone can just equivalently hijack your email account directly if you use a service like Gmail or Yahoo.

I think namecheap does not have a bad reputation, godaddy is known to be bad though(both security and customer support).

The thing is, of course people can hack your gmail or yahoo mail somehow, but when you host your own domain, you have the same attack vectors + dns hijacking and this last addition is easier to exploit with social engineering. Google atleast is virtually immune to DNS hijacking.

Re: YouTube suspends Google accounts of Markiplier's viewers for minor emote spam

#62

Post by Recursing »

tahdig wrote: post #48

There are too many people here advocating to host your own email in your own domain. Please be warned that it has its own risks: By hosting your main email on a custom domain(not a provider) you open a new attack vector for identity theft. There was an article on HN just a couple weeks ago about someone getting hacked by exactly this attack form. IIRC it was godaddy having stupid verification process. Someone can hij…

Also, you randomly won't be able to send mails, as google will randomly mark them as spam (for no reason, with no explanation and with no chance to appeal)

So you'll never know if any mail you send to a gmail user (which is pretty much everybody) will ever actually reach an inbox

https://www.mail-archive.com/mailop@mailop.org/msg08806.html

https://mailman.nanog.org/pipermail/nanog/2019-October/10381...

Re: YouTube suspends Google accounts of Markiplier's viewers for minor emote spam

#63

Post by bluejellybean »

Just absurd, the damage of having my entire google account being banned is seriously non-trivial and would easily cost thousands of Dollars worth of time and energy to deal with. I remember having the fear of what's happening here when Google originally purchased YouTube but after years of non-issue I forgot about the possibility. For me, this is the last straw with Google, the risk of being banned for such an arbitrary reason is simply too high for me and I'm going to start moving documents and accounts from their services.

It baffles me, they hire some of the worlds more intelligent people but the products/systems they produce are constantly idiotic and daft.

Re: YouTube suspends Google accounts of Markiplier's viewers for minor emote spam

#65

Post by throwaway2048 »

megous wrote: post #52

https://policies.google.com/terms?hl=en-US#toc-modification "Google may also stop providing Services to you, or add or create new limits to our Services at any time."

Wow I'm sure that they are compliant with the EULA is a relief to everyone involved.

Re: YouTube suspends Google accounts of Markiplier's viewers for minor emote spam

#67

Post by sascha_sl »

DaiPlusPlus wrote: post #38
cameronbrown wrote: post #31

Earlier quoted context omitted.

Nit: Valve just banned them from forums, not Steam. They already do what you're proposing.

Got a link? I remember reading that people were banned from their Steam accounts entirely without any refunds and they had to resort to CC chargebacks.

No link, but I got a personal anecdote.

I found a persistent XSS vulnerability on steamcommunity.com once upon a time. It used to be if you were playing a mod, the name of the mod could be shown in activity graphs and screenshot views. This was not sanitized whatsoever.

After 4 weeks of no response from their official email contact, I posted it on the (then entirely detached vBulletin based) Steam forums, with a notice I had disclosed the issue to all known to me @valvesoftware.com email addresses (including security@, which didn't bounce)

I had my account disabled, and spent 3 weeks emailing them asking what the fuck that was all about. It got re-enabled silently.

Re: YouTube suspends Google accounts of Markiplier's viewers for minor emote spam

#68

Post by l0b0 »

root_axis wrote: post #54
dannyw wrote: post #18

Earlier quoted context omitted.

We need legislation. Google is too powerful.

Why isn't "use a different email provider" an option? Why do we need laws to enforce good customer service?

For a large part of the population, losing their email account could be devastating. "Could" is deliberate, because once you lose it you wouldn't even know whether anything important landed in your inbox. Like a personal update from a friend, or some official business you need to respond to within days. Can you imagine trying to remember every single friend, business and government agency which might conceivably contact you, and figuring out how to contact each of them to let them know of your new email, plus getting them to re-send anything since you were blocked? It could put a wrench into someone's life for days or weeks.

Re: YouTube suspends Google accounts of Markiplier's viewers for minor emote spam

#70

Post by root_axis »

l0b0 wrote: post #68
root_axis wrote: post #54

Earlier quoted context omitted.

Why isn't "use a different email provider" an option? Why do we need laws to enforce good customer service?

For a large part of the population, losing their email account could be devastating. "Could" is deliberate, because once you lose it you wouldn't even know whether anything important landed in your inbox. Like a personal update from a friend, or some official business you need to respond to within days. Can you imagine trying to remember every single friend, business and government agency which might conceivably cont…

I understand the problems losing access to your email can cause, in fact, I have experienced this exact problem several years ago. It took me 3 weeks to recover my email, and after that experience I switched from gmail to protonmail.
Post reply on HN