Live data from Hacker News

Introducing selfie for sign-in: a new way to access your Google Account

blog.google

91–100 of 117 posts

Re: Introducing selfie for sign-in: a new way to access your Google Account

#91

Your Google Account holds a lot of valuable information, from cherished photos to important emails and documents. Stuff like this is why I and many other people are going out of our way to make this no longer the case.

"Be a shame if you couldn't access them any more... Verify identity to continue"

This actually happened to me - a decade ago or so, Google suddenly did not allow me to access my Google Mail unless I provided them with my phone number for "additional verification and security". I had got a job offer and was desperate to access my mail and so caved-in with a lot of resentment. (Ofcourse, now it is nearly impossible to create a Google account without a phone number, but in those days people considered phone numbers to be private and were leery at services that demanded it for sign-up). And then, later on they suddenly stopped allowing you to reset your passwords using email and security questions unless you provided them even more data for "verification" (which nearly often wasn't enough to allow you to recover the account).

Re: Introducing selfie for sign-in: a new way to access your Google Account

#92

I happily will provide my selfie with one brown eye and round pale face

I think this was a widespread thought days ago after the news that Google would implement a ReCaptcha requiring access to a camera.

The start of Google's "genitals DB".

Re: Introducing selfie for sign-in: a new way to access your Google Account

#93
post #66
post #38

Next step is to require the full transcript of your genome! /s

Funnily enough they already have that since it was _emailed_ to me.

Some Countries and legislations radically ban reading private communications. So, there is no linear, direct assumption that the email provider abuses the role.

But there is a juridical mess, already evident in matters like the eu's "ChatControl" laws (exemption to national rules about privacy for communication providers).

Re: Introducing selfie for sign-in: a new way to access your Google Account

#94
Let us get this straight and clear, because at first reading it seems like an "innocent" extra option:

the risk we assess is that under some conditions the provider could block the account, and the user would remain locked out unless he had the ability to do camera-based verification, so camera-based verification becomes from just optional to substantially mandatory?

--

Edit: elsewhere it seems it is mandated:

> To help keep you and others safe online, you may need to complete additional steps to access certain services. This extra confirmation helps us verify that the account owner is a real person and that the account wasn't created or used by computer programs or bots for the purpose of abuse, like spamming

Plus,

> To take a selfie [for "selfie video verification"], you'll need a mobile device with a Camera app

for many, it's a no.

Re: Introducing selfie for sign-in: a new way to access your Google Account

#95
post #87

Your Google Account holds a lot of valuable information, from cherished photos to important emails and documents. Stuff like this is why I and many other people are going out of our way to make this no longer the case.

I’m not sure I understand why this particular line bothers you. They seem to just be emphasising that your Google account has a lot of information and therefore they are providing another way to secure it? Whether this is a good method or not is a different discussion and I probably will not use this method

> will not use this method

It's probably mandated (see mine at https://news.ycombinator.com/item?id=49033329)

Re: Introducing selfie for sign-in: a new way to access your Google Account

#96

Every time Google comes out with a new "feature" like this, it reminds me to resume my de-Googling journey with reinforced vigor. Drive and Photos are low-hanging fruit. GMail and YouTube will be more difficult.

I migrated away from Gmail after 15+ years to Fastmail, it wasn't that hard.

Whenever I got an email from a company to my Gmail, I logged into my account with that company and made the change. After about 2 or 3 years, I had 99.99% switched over.

Fastmail has a fast bulk import tool, and also allows you to automatically import future emails as the arrive (which is how I got that remaining 0.01% that only emailed me once every 5 years).

I gave each company a (unique identifier)@mydomain so that I could catch when my email address was sold, shared, hacked, etc, which has happened. That also allows me to easily move away from Fastmail to another service provider that has a catchall ability anytime I need to, but hopefully will never need to.

Re: Introducing selfie for sign-in: a new way to access your Google Account

#97
> Your Google Account holds a lot of valuable information, from cherished photos to important emails and documents.

No, it does not. I create an account only when I'm forced to, e.g. on Google-certified Android phones, where I keep all synchronization off.

I'm eagerly waiting for official GrapheneOS phones. Pixels are a no-go for me because of the price-to-perf/quality ratio.

PS. It takes about 50 minutes to hunt down and turn off hopefully all the data grabbing features on a Samsung Android phone. Madness!

Re: Introducing selfie for sign-in: a new way to access your Google Account

#98

Your Google Account holds a lot of valuable information, from cherished photos to important emails and documents. Stuff like this is why I and many other people are going out of our way to make this no longer the case.

Self-hosting will become the norm very soon. I think the usual bottlenecks of "hard to manage, no backup" are no longer there. There are very good managed self-hosting solutions so you don't need to worry about anything. You just run your immich instance and you're good

Re: Introducing selfie for sign-in: a new way to access your Google Account

#99

Google already have 5,000 odd photos of me anyway in Google photos. I'm screwed either way.

Sure, but that's not the same thing. How they use the data is the important part. The google photos are not to be used for security for example. Different ToS. We should try and not have a defeatist attitude and fight back as much as we can

Re: Introducing selfie for sign-in: a new way to access your Google Account

#100

Earlier quoted context omitted.

So don't use Chrome/Chromium. The web is so much better with uBlock Origin anyway!!

I use Vivaldi, sadly it's based on Chromium and has quite a bit of the stinky parts... (Currently on an old Vivaldi version that still allows manifest v2.. I guess I'm asking to be pwned)

At this point it's probably better to switch to Firefox or Brave.
Post reply on HN