Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Tell HN: Google Cloud lets anyone add you to a project without your permission

news.ycombinator.com

Post reply on HN
Print view View original

121–130 of 130 posts

Re: Tell HN: Google Cloud lets anyone add you to a project without your permission

#121

Post by Ephil012 »

holografix wrote: post #120

I have a friend who works at GCP and we have discussed this in the past. There’s a huge organisational disconnect between the internal teams in charge of the “google account” product and the GCP team. If you’re not a paying customer via GSuite you will get ZERO customer support. As in, even if you’re also a GCP customer but you have some issue with you Google Account there’s next to nothing your account team can do.

Long shot, but is there any way you can forward this to your friend? I am pretty desperate to get this issue resolved. If they want to contact me, my email is in my account profile bio

Re: Tell HN: Google Cloud lets anyone add you to a project without your permission

#122

Post by ergocoder »

Someone please start a cloud project called "Donald Trump supporter.. let's go Brandon".

Then, you can add low-level poc Google employees to the project. Or you can also add white male execs at Google.

Let them make noise inside Google and Memegen.

Boom. This will be solved in a day. Guaranteed.

Re: Tell HN: Google Cloud lets anyone add you to a project without your permission

#123

Post by codeprimate »

This has already been weaponized. I've been getting comment spam phishing attempts from Google service accounts and Google Docs linking to scripts like this: "REDACTED://script.google.com/macros/s/REDACTED/exec?sl=REDACTED&dn=REDACTED&t=moc&s=au&sec=s&"

I am not sure what the script does or how to analyze it without risking my account security.

Re: Tell HN: Google Cloud lets anyone add you to a project without your permission

#124

Post by iopq »

autoexec wrote: post #46
EarthLaunch wrote: post #39

A company without customer support is incentivizing everyone to blare every single problem to the largest possible audience. The overall impression is that the company's products are unpleasant and dysfunctional. It's the opposite of advertising. Is not having support really worth the damage this causes to a brand? That said, many people treat support so badly that offering it may be worth avoiding on principle.

> Is not having support really worth the damage this causes to a brand? Once you reach a certain size the reputation of your brand is almost meaningless. Some of the largest and most successful companies around are almost universally hated and have terrible reputations. Those companies don't care and they continue to make unpopular decisions and actively screw over their customers and their employees all while pullin…

Amazon support is better and AWS makes more money. It's worth it.

Re: Tell HN: Google Cloud lets anyone add you to a project without your permission

#125

Post by [deleted] »

sph wrote: post #101
onphonenow wrote: post #88

Earlier quoted context omitted.

This is what I don’t get about google. I was all in on their ecosystem but then things like google speakers not working with google work calendars despite thousands of requests for 5 plus years. Meanwhile Amazon added feature to echo quickly. Then stuff like this, they just do not care / have any kind of a customer focus

What I don't get is people that keep signing up to Google services or hosting their apps on Google Cloud. Of all the software vendors out there, Google is the last one I'd use, and I certainly wouldn't rely them to run my business.

[deleted]

Re: Tell HN: Google Cloud lets anyone add you to a project without your permission

#126

Post by michaeltimo »

kngspook wrote: post #106

I feel like someone should spin up a separate GCP account, make a pile of projects, and then spam-add every google engineer they can find. Curious to see what happens next…

It seems like a fast way to get all your google accounts get suspended.

Re: Tell HN: Google Cloud lets anyone add you to a project without your permission

#127

Post by kyrra »

dmacedo wrote: post #119
kyrra wrote: post #48

Earlier quoted context omitted.

This tends to be a terrible idea, unless you really just want to nuke your Google account. (Googler, opinions are my own. I work on payments.)

Since you might know - as I've seen the references on social media for this exact occurrence - is this referenced somewhere in T&Cs?

I'm in a layer that just gathers chargeback signals and passes them off to other teams. I have effectively no insight to how the signals are used for your payment profile and your Google account overall. I mainly just pay attention to people issuing their chargeback against Google, and then posting about it on the internet and the fallout they see.

Also, if you see charges from Google on one of your cards but wasn't on your profile, I recommend following this guide: https://support.google.com/googleplay/answer/2851610?hl=en

Re: Tell HN: Google Cloud lets anyone add you to a project without your permission

#128

Post by onphonenow »

PdbNQvsEte7o36D wrote: post #113
onphonenow wrote: post #88

Earlier quoted context omitted.

This is what I don’t get about google. I was all in on their ecosystem but then things like google speakers not working with google work calendars despite thousands of requests for 5 plus years. Meanwhile Amazon added feature to echo quickly. Then stuff like this, they just do not care / have any kind of a customer focus

Seriously though. They push asking your Home "what's on my calendar today" with their tips, so I try it, and... wait why is there nothing on my calendar? Even though our Workspace settings are specifically set to allow Assistant access .

What’s funny is echo from Amazon works great for your google workspace account! Google has improved the situation but for like 6 years the mind boggled - so busy chasing big ai stuff, so little attention to customer stuff - the threads on this were thousands long - and that’s just the folks who could even figure out where to complain. And google workspace users are PAYING!!

I pay for dev support on aws and have had good support on Amazon retail as well. They can actually solve issues. I think Amazon retail credited me a very expensive purchase not because they could see the screwup their side but could understand what might have happened and maybe looked at my insanely long purchase history with virtually no returns and just made a call on the issue. Aws dev support should stick to scope - I do think some folks get way outside AWS specific stuff and into user solution configuration error stuff

Re: Tell HN: Google Cloud lets anyone add you to a project without your permission

#129

Post by cprogrammer1994 »

I tried for years to get myself removed from a project i do not recognize. All they did was to notify a supposedly dead account by email to remove me from their project. After a while the chat support I used for this purpose became a paid service so I gave up. I find this very unprofessional from their side and moved to Digital Ocean instead.

Re: Tell HN: Google Cloud lets anyone add you to a project without your permission

#130

Post by rolenthedeep »

The obvious answer is to add as many Google employees as you can find into a project and then get the project and everyone involved banned from Google.

ETA: I wonder if you could do this with generic addresses like support@gmail.com. Just completely break their system until they fix it.

Post reply on HN