Live data from Hacker News

Ask HN: Gmail account security

news.ycombinator.com

511–520 of 807 posts

Re: Ask HN: Gmail account security

#511

This is because most people use Gmail for basically all their online accounts: if you don't directly login to the site via Gmail, you can use your account to change your password. Imagine the damage which can be done if a malicious user breaks into someone's Gmail, if not your own, then the average person who uses the same password everywhere and trusts Gmail with everything. Not defending the practice at all. It sho…

>obviously if someone can authenticate with a YubiKey they are practically guaranteed to be the real person.

Or someone grabbed your backpack.

I understand why Google wants 2FA - it gives them a stronger claim to not provide support. Personally I don't want 2FA - I use strong passwords, and I don't trust them to provide support if my device is lost. Imagine a house fire, for instance, and losing not only your possessions but also basically all your online accounts. I have password backups, nobody has device backups.

Re: Ask HN: Gmail account security

#512
post #401

Earlier quoted context omitted.

Can you find a facebook engineer on LinkedIn and send them a InMail? Only costs you one month of linkedin plus, or whatever it is called.

If it would work, then 100% I would do it in a heartbeat. I posted on Blind looking for help, but just got snarky high-school level comments. Have you had experience reaching out via LinkedIn?

[deleted]

Re: Ask HN: Gmail account security

#513

Earlier quoted context omitted.

Interesting how the brand of security companies like Google keep telling us is in our best interests always seems to secure their corporate revenue streams first, while the security and freedom of users are an afterthought.

Yeah, they make almost tens of dollars forcing users to use Safari or Edge instead of lynx.

Yes but they save a lot not paying Firefox to be the search box.

Re: Ask HN: Gmail account security

#514
btw if it helps, by "location" they mean the same ISP you used to create the account or last successfully used it

old accounts without a valid phone number attached to get a SMS code are pretty much screwed if you change ISPs

Re: Ask HN: Gmail account security

#515
post #470

Once upon a time I worked at Google. I returned to Austin to visit old friends and took the opportunity to visit the Google office there. The Googlers sitting around me were primarily corporate sales. They weren't getting any corporate sales calls at all as far as I could tell, but there was one extremely irate user who was locked out of their GMail account and was repeatedly calling them because they were the only h…

You are actually pointing out a tremendous opportunity that Google has internally and externally. I work at Google and recently tried to file a bug about the calculator embedded in search. It was dastardly difficult to find how to file the ticket. It took me maybe an hour. A better system for filing tickets internally and for filing and triaging tickets from external users would be a tremendous asset for Google.

(edited)

If you don't mind sharing, what is the bug?

-

My comment originally read as follows, 2 people downvoted it.

>I work at Google and recently tried to file a bug about the calculator embedded in search. It was dastardly difficult to find how to file the ticket. It took me maybe an hour. A better system for filing tickets internally and for filing and triaging tickets from external users would be a tremendous asset for Google.

I didn't work for Google directly but I did work via another company (Tech Mahindra) so I am saying this as somewhat of an outsider compared with you.

You mention a bug about the calculator embedded in search: could you give me the details, and I can try to get it solved via my Google contacts.

For context, in my personal experience as a user and engineer, the Google embedded calculator is the best product among all of Google's many offerings and works flawlessly for all inputs. I find it breathtaking. For example, here is how many feet times pounds you can turn 3000 Calories into:

https://ibb.co/qJ0Qz0L

it worked on my first attempt. What does this mean? Well here's a foot-pound: https://ibb.co/N3WCxYV

If you weigh 180 pounds you're not climbing Mt. Everest twice (29,032′) without burning 3000 Calories. (Even at 100% efficiency).

Try getting a result like that from any other calculator (though Wolfram Alpha gets close).

What's the bug you tried to report? (What did you enter, what is the correct output and why is it correct, and what is the returned output and why is it incorrect?)

I've never seen it make a mistake so far, and I use it heavily for all sorts of things. (Sometimes I force Google to show me the calculator by typing = at the end of my Google query.) Since the product works so well for me personally, I'd love to understand what problem you have with it.

Re: Ask HN: Gmail account security

#516

Earlier quoted context omitted.

Reasonably confident one of my support tickets even got answered by the CEO once. They're a shockingly human-focused company.

Yeah, likely - I've answered a few tickets here and there :)

That's really cool! I'm just now migrating my Gmail-led life (15 years) to Fastmail, and it has been great so far.

Re: Ask HN: Gmail account security

#517

Had this. It was telling me to try again 'later'. Ok, i did 'try later' every day for three weeks, and they didn't let me in. Using the very same IP address as I used to always access it, no less. Then, I gave up, moved all my services to another email account, and after 2 or 3 months tried logging in, and it suddenly allowed me to log in. Needless to say, I will never again use gmail for critically important things.

My solution is, buy your own domain. It's cheap and it will cost you only 20$ a year or something like that. I'm not saying run your own email service (I do, but I recognize that it's complex and not worth for most people), but use a public email service (like also GMail) with your own domain. That way at least if you no longer can access your account, or you get banned, or whatever, you don't loose your address (sin…

And what email address did you use, when registered your domain?

Re: Ask HN: Gmail account security

#518
post #401

Not, Google, but I'm having sort of the same problem with Facebook. My church has a Facebook account that we used to set up our public page years ago. We assigned editors to the page, then promptly never used that account again. Fast forward to this year, and I need to add a new editor, which only the page admin can do. I reset the password on the church's facebook account (it was lost years ago), but when I log in,…

Can you find a facebook engineer on LinkedIn and send them a InMail? Only costs you one month of linkedin plus, or whatever it is called.

You can send a message with a connection request, no Premium required.

Re: Ask HN: Gmail account security

#519

Once upon a time I worked at Google. I returned to Austin to visit old friends and took the opportunity to visit the Google office there. The Googlers sitting around me were primarily corporate sales. They weren't getting any corporate sales calls at all as far as I could tell, but there was one extremely irate user who was locked out of their GMail account and was repeatedly calling them because they were the only h…

> "If you're not paying for it, you're the product."

Xoogler here - actually we used to say "if you are not buying advertising from us, Google can't help you at all".

And just recently I am great example of that. I used to have a Gsuite account at $6/per month for 3 years, then decided to give up on it b/c I wasn't using it. But unfortunately the domain expired before I could properly disconnect it and cancel my account. You can probably already imagine at this point what kind of hell I went thru with "google help". Ultimately I had someone from India called me 3 times to explain - the questionnaire they sent me has to be answer in specific format: each question has to have one paragraph space, then tab (9), then my answer. I kid you not! I spent 3 weeks, been transferred over email ticket about 10 times and every time they told me the same thing. Even if I did exactly how they want it - I guess email was automatically eating up the tabulate key and replacing it with spaces. Eventually a buddy of mine who still works there (different dept) told me customer support forwards your email to some account that parses message automatically, and they cannot even change one single letter in your message. Even when explaining them on the phone that I am following up with their stupid protocol of one new line, then tab, then my answer, then next line must be second question, their program must be messing it up.

Eventually I gave up on their customer support. It took me/them six months of chargeback disputes for $6 each month until my account must have popped out on someones screen and Google employee gave me 3.5 seconds of their time to click "close this account".

Re: Ask HN: Gmail account security

#520

Earlier quoted context omitted.

I guess this is why Amazon is playing the long game with their obsessive focus on customers. I don't know how that really plays out where the rubber meets the road but that's what Jeff bezos always keeps talking about.

It plays out with Amazon absolutely crushing Google when it tried to be a consumer marketplace, and even trouncing Google at providing web infrastructure services. If, somehow, an antitrust ruling split ads from the rest of Google the non-ads remainder wouldn't last more than a few years.

No post body was provided.
Post reply on HN