Live data from Hacker News

Tell HN: A stranger is using my YouTube account and Google can't log them out

news.ycombinator.com

41–50 of 60 posts

Re: Tell HN: A stranger is using my YouTube account and Google can't log them out

#41

Just delete your YT account, and create a new one. From what I just read, it should be possible to delete YT without deleting your whole Google account.

This is a solution of last resort that I still don't want to go for

Why? You can just re subscribe to everything. Your YouTube history is more valuable to Google than to you.

Re: Tell HN: A stranger is using my YouTube account and Google can't log them out

#42

Could you try enabling advanced protection (if you are comfortable)? When I made that change I was forcefully logged out everywhere. (Disclaimer: used to work at Google, don't anymore, didn't work on accounts)

The bug is that logging out doesn't work for non-critical services.

Re: Tell HN: A stranger is using my YouTube account and Google can't log them out

#43

"my old Smart TV that I gave away" Gave away to whom ? Did you donate or give it to an actual person. Perhaps just ask them to log you out ? Or do you think they are a bad actor ?

They're not a bad actor, I wouldn't be surprised if they have no idea they're even logged in. I actually just threw away my TV in the local drop off point. I thought it was broken beyond a point that was worth to repair but I'm guessing somebody more handy than me picked it up and DIYed it

Sorry to hear about your predicament (best of luck)

This scenario illustrates why “smart” TVs aren’t such a great idea (you think it’s dead and can’t log out, but someone else eventually fixes it or uses its parts)

Re: Tell HN: A stranger is using my YouTube account and Google can't log them out

#44
My uneducated guess:

The app is in fact logged out, but it is still sending search logs back to YouTube using a device or session identifier. If you use YouTube logged out, for example, you’ll still have a history, which is tied to your session/device or something. There must be some system within YouTube that’s reconciling the TV’s logs back to your account, since it used to be your device.

Re: Tell HN: A stranger is using my YouTube account and Google can't log them out

#45

You shouldn't be telling this to tier-1 support, you should be reporting it through a contact that's labeled as specifically being for reporting security issues affecting Google login, ie https://bughunters.google.com/ . This is a significant security vulnerability because the existence of this TV implies the existence of an API somewhere which the TV has used, which can create revocation-resistant keys. (I ran into…

I submitted a similar issue regarding Google Drive folders. I don't think submitting this issue will earn OP any money as a "significant security vulnerability": In other words, Google will not consider this a significant security vulnerability. > While our highest-impact services (e.g., Google Wallet, Gmail) are designed to make cookies expire very shortly after the user logs out, we believe that most potential expl…

> I don't think submitting this issue will earn OP any money as a "significant security vulnerability"

I don't think OP wants to claim a bounty (and anyway, probably doesn't have the details needed), OP just wants the issue fixed. Getting the issue looked at by someome who cares is more likely in the bounty program than through google customer support, because bug bounty triagers need to be empowered to communicate with people empowered to fix issues and google customer support isn't so empowered.

In a good customer service organization, an issue like this should get escalated, but that's not the reality at google, and not at too many other places either.

Re: Tell HN: A stranger is using my YouTube account and Google can't log them out

#46

Earlier quoted context omitted.

This is a solution of last resort that I still don't want to go for

Why? You can just re subscribe to everything. Your YouTube history is more valuable to Google than to you.

watched videos no longer watched as watched, playlists gone, "algorithm" reset, having to resub to everything, just a big pain and no guarantee it would even solve the problem

Re: Tell HN: A stranger is using my YouTube account and Google can't log them out

#47
You should try to converse with them through the search history. Search for something like "Hello I am the previous owner of this TV. Please logout from Youtube.".

If the stranger is not a bad actor, they will definitely be happy to log out.

Re: Tell HN: A stranger is using my YouTube account and Google can't log them out

#48

This should help: "1. Open https://myaccount.google.com/device-activity on any device. 2. Select the device you’d like to sign out of. 3. Select Sign out. You can also remove YouTube on TV access for a Google Account by opening https://myaccount.google.com/permissions > select YouTube on TV > Remove Access." https://support.google.com/youtube/answer/7612539?hl=en

I've done both of these things - to no avail! This is really weird

Did you already mention the brand/model/year of the smart TV or the OS/Platform/version etc

Maybe that might narrow down some search results to p3culiar issues seen only on that firmware or app version? Just maybe

Re: Tell HN: A stranger is using my YouTube account and Google can't log them out

#49

Earlier quoted context omitted.

"What's the line" as in if you were to draw a line in the sand - what would be "enough" to put you over said hypothetical line of leaving GMail? I think OP may be implying that this should be "enough", but I don't want to make any assumptions. One thing to note about Proton is if you want to do any shared addresses, say for family use cases, they're missing common features like aliases because of the implied encrypti…

Ah thanks for that. That makes sense! I'll also check out FastMail. Thanks for the recommendation :)

Seconding Fastmail. Their great advantage is that they make money by providing email service and their focus is correspondingly different from the Borg.
Post reply on HN