Live data from Hacker News

An Example of a Sad Google Account Recovery Failure and Its Effects

lauren.vortex.com

41–50 of 133 posts

Re: An Example of a Sad Google Account Recovery Failure and Its Effects

#41
post #31

Earlier quoted context omitted.

These backups could be local or remote backups better be local AND remote.

Why? I don’t see how that is better than two or three remote backups? Do I need to change my strategy?

it depends on what your remotes are, and what your risk profile is. consider the problem that your internet access may go down and you are cut off from all your backups, unless one of those is your parents house where you can get to without internet.

Re: An Example of a Sad Google Account Recovery Failure and Its Effects

#42
post #36

> I recognize that there are many different kinds of google users. Some folks [...] need maximum security. (un?)fortunately this is not exactly true. While it's true that some folks do need "extra security", the steps in discussion here are fortunately still applicable for the general population. We as a society have decided (correctly) that leaking your private photos, conversations and data is an unacceptable risk,…

> We as a society have decided (correctly) that leaking your private photos, conversations and data is an unacceptable risk, and punish the companies strongly for it. On what planet do companies get punished strongly for leaking PII? It happens to me multiple times per year and if I'm lucky I get a pittance from a class action suit years later. The executives who raked in huge bonuses cutting security don't get punis…

Punish companies is not the same as you getting compensated. It happens (at least in EU) harsher with the GDPR, so yes it's fairly recent, but so is security online (just 10 years ago not even half of the sites used HTTPS).

There's dozens of high-profile fines every year due to data mishandling from Europe, just a quick search:

> Data protection supervisory authorities across Europe have issued a total of nearly EUR1.1 billion (USD1.2 / GBP0.9 billion) in fines since 28 January 2021, according to international law firm DLA Piper.

"fined Facebook owner Meta META 265 million euros [...] for not better safeguarding more than half a billion users’ phone numbers and other information" - https://www.wsj.com/articles/facebook-parent-meta-fined-276-...

"European Union privacy fine related to data transfer of Facebook's EU users to U.S. servers" - https://www.reuters.com/technology/meta-face-record-eu-priva...

"Luxembourg DPA issues €746 Million GDPR Fine to Amazon" https://dataprivacymanager.net/luxembourg-dpa-issues-e746-mi...

"Manx Care faces £170k fine over patient data breach" - https://www.bbc.co.uk/news/world-europe-isle-of-man-62590514

etc

Re: An Example of a Sad Google Account Recovery Failure and Its Effects

#43

> When her ancient iPad finally died, she tried to add the gmail account to her new replacement iPad. However, she couldn’t remember the password in order to login. There are of course no details on how exactly the iPad died, and it's possible it's been thrown away already, or that it has been remotely disabled, etc.. But I'm very sure that the iPad can be repaired, or at least that the data on the iPad can be recove…

If you get an old iPad, you can't (re)install modern apps. Apple has forced app developers to upgrade their apps, which has revoked support for older iOS versions. I ran into this over Christmas when trying to help someone who had been using an old "The New iPad" (I think the iPad 2) but had lost the charger cable. We charged it up, it powered on and reconnected back to their wifi. They had to re-sign in to Apple, bu…

[deleted]

Re: An Example of a Sad Google Account Recovery Failure and Its Effects

#44
A few weeks ago, I was in a similar situation, I needed to read an email on an old account. I typed my email, my password and then an error, it was blocked for some reason, it asked me to check my recovery email, except that email was never validated (there was a mistake in the domain extension). It should never have blocked an account with a valid password when the recovery email was never validated. I successfully talked to human support, they told me they could do nothing about it. It magically unlocked a few months later, if you lost your account, keep trying, one day you may access it

Re: An Example of a Sad Google Account Recovery Failure and Its Effects

#45

Earlier quoted context omitted.

I’ve (slowly) begun to make an archive of all my Google data so it will be less-awful should something ever happen. Your story scares the crap out of me because I (already) have an account that I’ll never be able to access again either - c’est la vie but it still stinks to know that a large part of my life is locked behind a metaphorical prison.

You know about Takeout, right?

If it is just email, it is more ergonomic to setup a local POP client like Thunderbird to download the emails. You don't have to use it to send email, just configure once and bring it up regularly to fetch the emails. I have a full copy of my gmail mailbox this way (already moved banking/govt services to fastmail anyway).

Re: An Example of a Sad Google Account Recovery Failure and Its Effects

#47
post #9
post #8

Earlier quoted context omitted.

Have you ever tried to takeout a large amount of data across many services? Describing it as a process you do slowly is entirely fair.

For me, I just used google takeout to generate a giant 18gig zip and then I downloaded it. I do that once a year. It takes a long time to download, but it’s actually fairly quick and I wouldn’t describe it as a slow process.

Where/how do you backup your takeout data?

Re: An Example of a Sad Google Account Recovery Failure and Its Effects

#48
post #19

Google is attempting to migrate my account to Passkeys, which doesn't work at all for me. Despite spending significant time trying to get it to work I cannot get a passkey that works on my iOS device, and without it it seems impossible. And yet Google keeps trying to log me in using it.

I had a similar experience with an Android. Even though I never approved the use of my phone, Google account security showed it was registered already.

The prompts went away when I explicitly removed it as a sign in option.

I also had to explicitly disable "skip password when possible".

Re: An Example of a Sad Google Account Recovery Failure and Its Effects

#49
post #27

> They’ve all basically hit the brick wall of Google suggesting that at their scale, nothing can be done about such “edge” cases. The thing is that at scale your “edge” cases are still millions of people. Companies love the benefits that come from scale, like having a billion people use their service, but they never seem to be capable of handling the other parts that come with it :(

When Google was first starting, savvy techies were aware of aggressive sociopath companies (e.g., Microsoft), and also that Google would probably be very powerful. Maybe Google had some of that savvy and that's why they instituted "Don't Be Evil". With all the supposedly smart people and resources that Google has, you'd think they could somehow figure out how not to be the cause of marginalizing people while dismissi…

"Don't be evil" was /killedbygoogle too :)
Post reply on HN