Live data from Hacker News

Some Google Photos videos in backups were sent to strangers in November

ww.9to5google.com

91–100 of 143 posts

Re: Some Google Photos videos in backups were sent to strangers in November

#91
post #25

Earlier quoted context omitted.

What did you replace Gmail and GDocs with? I've successfully moved to Firefox and DuckDuckGo, but am struggling to get off Docs and Gmail.

Fastmail for mail, and I use git for most document-type storage. If I absolutely need a spreadsheet, I just use Apple's Numbers which is mostly crap, but good enough.

Fastmail is good but I bet the Australian government is vacuuming up everything you send/receive. I’m considering ProtonMail again now that there is calendar

Re: Some Google Photos videos in backups were sent to strangers in November

#92

How does this happen? I realize it's a small percentage, but this is one of the first tests you build. Even 1 photo (not to mention this is regarding videos) should never make it to another non-authenticated user. This is a massive mistake.

I once witnessed a very similar bug. The story was a comedy of errors:

1: I interviewed a HORRIBLE candidate and told my boss in no uncertain terms not to hire the bozo. Then, I look at my colleagues and explain how poorly the interview went.

2: I go away for two weeks to have surgery

3: I come back and learn that we're hiring the bozo

4: My boss asks me to do some pair programming with the bozo, and he doesn't understand some very basic concepts

5: I hear the bozo is debugging webservice code in production

6: We had a data leak from one of the bozo's bugs

From what I remember, it was a very dumb bug based on clear misunderstanding of fundamentals.

Re: Some Google Photos videos in backups were sent to strangers in November

#93
post #21

Earlier quoted context omitted.

I, too, was a fan of Google Photos in the early days. But I've decided that privacy is more important than the convenience of its syncing feature. You never know how that data might come back and bite you in the future. I have an iPhone but I don't use iCloud's backup or sync feature either, I just store my photos locally. I backup my iPhone to my iMac, and I backup my iMac to my Synology NAS in my closet. I try to k…

One of the favorite features I have of the Plex Server, is that the Plex app will automatically back up photos on your phone to your Plex server, which can run on Synology as well (mine's on an ODroid HC connected up to a multi-TB drive with backup drive).

Our Plex AppleTV app has begun aggressively pushing its own content lately. It’s a nuisance to navigate to where our personal content is now

Re: Some Google Photos videos in backups were sent to strangers in November

#94

Earlier quoted context omitted.

As a recent convert from gmail to fastmail, this scares the hell out of me. How long did this go on before you pulled the plug? I am not Australian/located in Australia so I would have about as much recourse with fastmail as I would with google (ie. none).

Emails were deleted August 23rd, across a wide variety of folders, all at the same millisecond (when I later pointed this out and how difficult it would be for me to do this accidentally, they did not comment). Noticed on October 4th. I'd noticed some emails weren't turning up in searches but I chalked it up to my bad memory until there was one I knew for a fact should have been there. It was Oct 22nd by the time we…

This is really unfortunate. I've been using Fastmail alongside Gmail and thought about switching over completely to the former at some point, just haven't come around to doing so yet. I'm glad you shared these details -- always good to know how organizations respond when things don't go as planned, as opposed to what's stated in their marketing materials.

Re: Some Google Photos videos in backups were sent to strangers in November

#95

Earlier quoted context omitted.

As a recent convert from gmail to fastmail, this scares the hell out of me. How long did this go on before you pulled the plug? I am not Australian/located in Australia so I would have about as much recourse with fastmail as I would with google (ie. none).

Emails were deleted August 23rd, across a wide variety of folders, all at the same millisecond (when I later pointed this out and how difficult it would be for me to do this accidentally, they did not comment). Noticed on October 4th. I'd noticed some emails weren't turning up in searches but I chalked it up to my bad memory until there was one I knew for a fact should have been there. It was Oct 22nd by the time we…

Where are you hosting Mailinabox? I've always wanted to use it instead of gmail/fastmail but all I find are the generic use DigitalOcean, etc tutorials and I'm wondering what somebody actually using it has it set up with, what are the specs? Thanks in advance!

Re: Some Google Photos videos in backups were sent to strangers in November

#96
post #48

Earlier quoted context omitted.

Didn't Australia like pass a bill or something that compels corporations like Fastmail to give the government any and all encrypted communications if they ask?

This is one of those stories that had no relevance in actuality, yet gets brought up in nearly every single mention of Fastmail: The bill applied to a requirement for backdoors/the ability to decrypt data. Fastmail was never E2E encrypted in the first place (like Gmail, Outlook, and most other major mail providers), and hence, Fastmail was always required to comply with lawful requests for your data.

It’s always relevant because the world has a good idea how the Australia treats data privacy and security. Their elected officials are shooting their tech sector in the gut

Re: Some Google Photos videos in backups were sent to strangers in November

#97

Earlier quoted context omitted.

How are photos added to the library? I had a quick look through the PhotoStructure website and it looks interesting, but I haven't seen this answered. For me the appeal of Google Photos is that all my phone's photos get uploaded when I'm on wifi. PS: There's an image that can't be loaded on the confirmation page when registering for email updates.

> How are photos added to the library? PhotoStructure imports files that are available to the device that it runs on: local files and anything mounted via a network filesystem (like AFS, NFS, or SMB/CIFS). I use SyncThing or Resilio Sync to send my phone's photos and videos to my NAS. When I'm on vacation with limited bandwidth, I add a sync node on my laptop (which is connected to the hotel WiFi), so my phone syncs…

I see, thanks! And yes, I agree on the app part. Which is where Google Photos' value lies for me as it is rock solid in that department.

I'm currently running both syncthing and Google Photos to store my photos. syncthing is great once it works, but it is definitely not something I would expect a family member to be able to set up.

In any case I'm very much looking forward to see where PhotoStructure is going. I've set up a reminder to give it a try.

Re: Some Google Photos videos in backups were sent to strangers in November

#98

Earlier quoted context omitted.

Everybody makes mistakes and nothing in the world is black and white. The only question is, is your cloud provider less likely to make mistakes with your data than you are? For most people, the answer is going to be orders of magnitude less likely.

> The only question is, is your cloud provider less likely to make mistakes with your data than you are? No, the second question, which is a multiplier of the first, is how catastrophic the mistakes can be. Google _can_ accidentally do much worse things with your data, but it probably much less likely to make mistakes with it in the first place.

Yep. If I screw up, then the worst case is pretty much that the data is gone.

If the cloud provider screws up, then the worst case is that my video goes viral and lives on the internet forever.

It isn't hard to imagine some troll finding he got some embarrassing video via takeout and putting it up on reddit for everyone to see.

Re: Some Google Photos videos in backups were sent to strangers in November

#99

The usual argument for using "cloud" over managing your own files/data is that it's very hard to safely manage your own data without making mistakes (data loss, etc). However, this is an example of how companies like Google also make mistakes. Furthermore, when Google/FB makes a mistake (like leaking your private data) they do it at a global scale. I offboarded myself from all of Google's services a while ago, but I…

For consumer products, the cloud makes perfect sense. Scaling, performance and orchestration make it a perfect fit. And who cares about the few things that fall into wrong hands here and there... Our business, on the other hand, works closely with government agencies, insurance companies and similar institutions, and the cloud is an absolute no-go. All sensitive data on-premise on the intranet. No need for change. I…

> And who cares about the few things that fall into wrong hands here and there...

I surely hope you are not in charge of any consumer-facing cloud storage products.

Everyone cares.

Re: Some Google Photos videos in backups were sent to strangers in November

#100

The usual argument for using "cloud" over managing your own files/data is that it's very hard to safely manage your own data without making mistakes (data loss, etc). However, this is an example of how companies like Google also make mistakes. Furthermore, when Google/FB makes a mistake (like leaking your private data) they do it at a global scale. I offboarded myself from all of Google's services a while ago, but I…

That’s a well known fact and they even promise 99.9X uptime in their service. The usual argument is that Google is less likely to make mistakes than the average Joe managing his own infrastructure.

Google introduces a different set of risks and failure modes. It may shut down the service you are relying on. It may lock you out of your account for confusing reasons.

Which isn't to say that you shouldn't use it, just that you are exposing yourself to different risks, and you should take steps to mitigate those risks. Primarily by duplicating your data other places.

Post reply on HN