Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Thanks HN: Lessons learned after Google nearly killed my site

uploader.win

Post reply on HN
Print view View original

141–150 of 296 posts

Re: Thanks HN: Lessons learned after Google nearly killed my site

#141

Post by imwillofficial »

that_guy_iain wrote: post #101
nchelluri wrote: post #98

Earlier quoted context omitted.

It's funny you read it that way, you may understand it correctly but I came away with a different interpretation, that they allow-listed the developer's IP and returned good non-phishing-warning responses to the monitoring check, but not to end-users.

They said their test scripts worked but people using Chrome got an error. So I take that as in their scripts weren't using Chrome at all. To be fair, I've not had this happen yet so I am going to try and find a site that chrome won't let me visit and see what happens when I visit it programmatically.

When that warning page is thrown, is a 200 returned? It could “load” ok, but be blocked by a flag for chrome that isn’t http flag. Total guess. Anyone have any insight on that page showing up?

Re: Thanks HN: Lessons learned after Google nearly killed my site

#142

Post by randycupertino »

appsecthrowaway wrote: post #131
jokethrowaway wrote: post #83

Earlier quoted context omitted.

I'm in a similar situation with Apple. I can't access my 10 years old account even though I know the password and control the email attached to it because I don't remember my security questions and I don't have my recovery email anymore. I probably put rubbish data in the security questions as they weaken the security of the account. Funnily enough that password leaked and someone managed to take over my account (I w…

I was in a similar situation 3-4 years ago. The app store kept asking for answers to my security questions which I did not remember to have set up, ever. I went various rounds with their phone support trying answers on the phone (there are only so many reasonable answers for "Who was your first manager?") to no avail. Then I just enabled 2FA and the security questions requirement went away immediately. Back then, the…

I had one recently where I was locked out of my medidata/Rave account for not knowing the answer for "Who was your best friend in 4th grade?" I seem to recall that I had a lot of different friends in 4th grade, and it was also blurring with crossover to 3rd and 5th grade etc.

After spending hours on hold and escalating through the support, they finally unencrypted my answer and told me what it was and I had put our cat! Totally did not remember that. Since then I've started paying attention to the questions I select when I set up the passwords and trying to idiot-proof myself to something I will actually remember in 7 years, not trying to be clever in the response.

As a bonus stick you in the ribs "revenge," when I finally was able to get it reset up and log in, I was gobsmacked to see that the customer support reps had assigned me mandatory extra remedial rave training to be completed before I could access the functional areas of the software! Lol. Touche.

Re: Thanks HN: Lessons learned after Google nearly killed my site

#143

Post by imwillofficial »

fefe23 wrote: post #32

Can someone explain to my why Google isn't being drowned in a torrent of lawsuits? We are getting stories like this on a weekly basis now. Google is clearly causing measurable harm to your company and you. And apparently to thousands before you. Considering how much money patent trolls manage to extract from Big Tech with considerably weaker cases, how is it that everybody is treating Google like a fragile grandmothe…

Two words.

Regulatory Capture.

The dividing line between big tech and big gov is far thinner than most people consider.

Re: Thanks HN: Lessons learned after Google nearly killed my site

#144

Post by imwillofficial »

alisonkisk wrote: post #42
fefe23 wrote: post #32

Can someone explain to my why Google isn't being drowned in a torrent of lawsuits? We are getting stories like this on a weekly basis now. Google is clearly causing measurable harm to your company and you. And apparently to thousands before you. Considering how much money patent trolls manage to extract from Big Tech with considerably weaker cases, how is it that everybody is treating Google like a fragile grandmothe…

What is the tort? Mcdonald's burned off a woman's labia after burning the flesh of several people with coffee tens of degrees hotter than is safe, and then refused to simply pay her medical bills, prompting a lawsuit. Has Google burned your labia?

McDonald’s did not “burn off a woman’s labia”

That’s some dumb shit right there.

Re: Thanks HN: Lessons learned after Google nearly killed my site

#145

Post by ghaff »

thinkloop wrote: post #135
ghaff wrote: post #104

Earlier quoted context omitted.

Furthermore, the answers to security questions aren't always stable. "What was your first pet?" Well, I know how I answer this question because one dog in particular I sort of consider my first pet. But I can remember dogs we had before that one so my answer is a somewhat arbitrary one.

It's none of anyone's business! I generate one password for the password and a second password to break into 4 char random chunks for the security questions which I record in "notes" of the password manager.

Meanwhile, in practice, when I had to do a brokerage transfer a couple months back virtually, the brokerage had a long list of security questions that they had apparently assembled from various credit reporting and other sources that I had to answer to make the transfer. The identity of my first pet or my city of birth is simply not a big concern of mine compared to the information widely available on me from all sorts of sources that I have no control over.

Re: Thanks HN: Lessons learned after Google nearly killed my site

#146

Post by DanBC »

imwillofficial wrote: post #144
alisonkisk wrote: post #42

Earlier quoted context omitted.

What is the tort? Mcdonald's burned off a woman's labia after burning the flesh of several people with coffee tens of degrees hotter than is safe, and then refused to simply pay her medical bills, prompting a lawsuit. Has Google burned your labia?

McDonald’s did not “burn off a woman’s labia” That’s some dumb shit right there.

She had full thickness burns requiring debridement and skin grafts. You probably need to read up on her injuries before calling it dumb shit.

Re: Thanks HN: Lessons learned after Google nearly killed my site

#147

Post by imwillofficial »

So this sucks for the developer, but I have another story to share.

I was trying to buy a school bus to make a schoolie out of, the Craigslist add directed me to a seemingly innocuous eBay motors link that looks pretty close to the real thing. I was busy and clicked, totally intending to drop $5k. I got distracted and had to come back to it later, when I did, credit card in hand, the page showed the red screen with a huge warning. A closer look revealed the bad url.

Saved by google? Oh god, I think I need a shower now.

Re: Thanks HN: Lessons learned after Google nearly killed my site

#149

Post by hamburglar »

random5634 wrote: post #10

Quick notes: Site owner has not confirmed they screened all uploaded content for malware - this is a major issue these days and google and others will flag you if you host viruses and pump out malware. And no - you cannot sue google to force them to allow users to be infected. It’s not clear that all customer content is hosted on a separate domain, and each customer on a separate sub domain . Your reputation will be…

I haven’t read all comments so I don’t know if anyone made this suggestion already, but for a demo uploader, you could probably just have all the file contents replaced with zeros, or stand-in data of the same content type (eg all videos turn into a video saying thanks for trying it out, padded with zeros to the original upload size)

Re: Thanks HN: Lessons learned after Google nearly killed my site

#150

Post by sneak »

imwillofficial wrote: post #147

So this sucks for the developer, but I have another story to share. I was trying to buy a school bus to make a schoolie out of, the Craigslist add directed me to a seemingly innocuous eBay motors link that looks pretty close to the real thing. I was busy and clicked, totally intending to drop $5k. I got distracted and had to come back to it later, when I did, credit card in hand, the page showed the red screen with a…

The fact that they are sometimes useful does not negate the fact that they have too much power to censor the web.
Post reply on HN