Live data from Hacker News

Librarian's Letter to Google Security

docs.google.com

271–280 of 484 posts

Re: Librarian's Letter to Google Security

#271

Earlier quoted context omitted.

This is where regulations can step in, to require email providers to accept mail from essential service providers.

I will pass on that, no one should be required to accept messages from anyone

How about "required to not mark as spam"?

Re: Librarian's Letter to Google Security

#272

Earlier quoted context omitted.

It's not just Google, many corporations are starting to make "assumptions" about their customers, and these assumptions totally exclude entire groups of people. A great example I use is there are a ton of restaurants and fast food places around me. I used to walk to get lunch every day but eventually had to stop, these places realized most customers went through the drive through so they closed the lobby. Now even th…

> A great example I use is there are a ton of restaurants and fast food places around me. I used to walk to get lunch every day but eventually had to stop, these places realized most customers went through the drive through so they closed the lobby. Now even though this place is a 5 minute walk from me, it's no longer accessable if I'm not in a car. I think this may have to do COVID and then staffing shortages creati…

I walk through drive-throughs regularly. I don't even get particularly odd looks like I'd initially expected. These include both fast food and bank/ATMs (or a teller at the other end).

Re: Librarian's Letter to Google Security

#273
post #204

Here's an idea: Why not allow the owner of a Google account to delegate a trusted third party who can handle MFA/otherwise approve logins on their behalf. I kind of do this already by setting the recovery emails for family members (especially aged parents) Google accounts to those that I control, but to my knowledge it is not possible to do the same for the mobile number used to secure the account. This way, at least…

So the biggest problem is that every optional feature you offer up does not help when someone walks into the library already locked out. The vast majority of society will never be aware of available options and features for their Google account, so it's only the default behavior that matters. Most people locked out of their account could've set up some sort of way to get in (like backup codes), if hindsight was 20/20…

At what point is it reasonable to start assuming basic security/computer literacy on the part of the public (to the point where, if you screw up, it is your fault for screwing up and not the computer/companies fault for not telling you something)?

This is an open question. We are not there yet, but at the same time I don't think it's tenable in the long term to be in the state of assuming the user can't be trusted to know what 2FA is.

Re: Librarian's Letter to Google Security

#274

Earlier quoted context omitted.

It's not just Google, many corporations are starting to make "assumptions" about their customers, and these assumptions totally exclude entire groups of people. A great example I use is there are a ton of restaurants and fast food places around me. I used to walk to get lunch every day but eventually had to stop, these places realized most customers went through the drive through so they closed the lobby. Now even th…

> A great example I use is there are a ton of restaurants and fast food places around me. I used to walk to get lunch every day but eventually had to stop, these places realized most customers went through the drive through so they closed the lobby. Now even though this place is a 5 minute walk from me, it's no longer accessable if I'm not in a car. I think this may have to do COVID and then staffing shortages creati…

I think this may have to do COVID and then staffing shortages creating a necessity rather than a active business decision.

There's a Starbucks near me that was built as drive-through only. Where there should be a lobby, it's just blacked-out glass and a door for the employees to enter through. Makes the whole strip mall look really scary, especially since vagrants sleep in the doorway.

I assume it's for commuters, which means all Starbucks contributes to the neighborhood is traffic and crime. Thanks, Starbucks!

It would be ridiculous but couldn't you walk through the drive through?

I used to do this all the time when I was a kid, but more and more places won't serve walk-ups at drive throughs. They claim it's for safety, hygiene, insurance, or whatever the excuse-du-jour is. They just close the window and ignore you.

Re: Librarian's Letter to Google Security

#275

Earlier quoted context omitted.

It's not just Google, many corporations are starting to make "assumptions" about their customers, and these assumptions totally exclude entire groups of people. A great example I use is there are a ton of restaurants and fast food places around me. I used to walk to get lunch every day but eventually had to stop, these places realized most customers went through the drive through so they closed the lobby. Now even th…

> A great example I use is there are a ton of restaurants and fast food places around me. I used to walk to get lunch every day but eventually had to stop, these places realized most customers went through the drive through so they closed the lobby. Now even though this place is a 5 minute walk from me, it's no longer accessable if I'm not in a car. I think this may have to do COVID and then staffing shortages creati…

I've been turned away more often than not by restaurants (of a variety of brands) for attempting to walk/bicycle through the drive-through. I have no idea if it's corporate policy, franchise policy, or incapable exception handling by staff, but the de facto result is that no, you can't reliably go through a drive-through without a motor vehicle (I assume they allow motorcycles, despite that I can't see at all what the functional difference between a motorcycle and a bicycle is from the perspective of a restaurant drive-through).

Re: Librarian's Letter to Google Security

#276

So, what should Google do, here?

Google employs the smartest minds on the planet and also have full insight on how Google works and what tools they have, so it shouldn't be hard for them to come up with a viable solution I believe.

Yeah but we can't expect them to be able to handle a problem that ( checks notes ) many other kinds of business have been solving since the earliest days of commerce.

Re: Librarian's Letter to Google Security

#277
First, needs a (2021) in the title, the body references “Today, July 19, 2021”.

Second, while Gmail is popular, they are not the only contenders in the space. Can these users not also have an outlook, AOL, or yahoo email address?

I understand switching email providers is not an easy thing, but it is not impossible.

Re: Librarian's Letter to Google Security

#278

I fully sympathize with the librarian's concerns, but there's this: "Many government welfare forms, housing applications, and jobs applications these days require the use of the internet exclusively with no option to fill things out in person." Why is this? Really, this does not seem like a problem Google caused, but rather a problem caused by the government when they made it mandatory to have internet access to get…

I agree - this is a really bad situation for people, and I'm glad that she's publicizing the issue, but it might be that a free email service from a corporation isn't ever going to serve as a robust enough way to provide essential government services to people. In a perfect (ly funded) world, people might be better served by email accounts from the post office, or even the library.

Re: Librarian's Letter to Google Security

#279

First, needs a (2021) in the title, the body references “Today, July 19, 2021”. Second, while Gmail is popular, they are not the only contenders in the space. Can these users not also have an outlook, AOL, or yahoo email address? I understand switching email providers is not an easy thing, but it is not impossible.

[deleted]
Post reply on HN