Live data from Hacker News

Google shifts goo.gl policy: Inactive links deactivated, active links preserved

blog.google

91–100 of 194 posts

Re: Google shifts goo.gl policy: Inactive links deactivated, active links preserved

#91
post #42

"Actively used" criteria scrods that critical old document you found, in which someone trusted it was safe to use a Google link. Not knowing all the details motivating this surprising decision, from the outside, I'd expect this to be an easy "Don't Be Evil" call: "If we don't want to make new links, we can stop taking them (with advance warning, for any automation clients). But we mustn't throw away this information…

"Don't Be Evil" has been deprecated for a while

Re: Google shifts goo.gl policy: Inactive links deactivated, active links preserved

#92

Earlier quoted context omitted.

The Google URL shortener stopped accepting new links around 2018. It has been deprecated for a long time. I doubt it was a cost-driven decision on the basis of running the servers. My guess would be that it was a security and maintenance burden that nobody wanted. They also might have wanted to use the domain for something else.

How much of a burden could this really be? The nature of something like this is that the cost to run it naturally goes down over time. Old links get clicked less so the hardware costs would be basically nothing. As for the actual software security, it's a URL shortener. They could rewrite the entire thing in almost no time with just a single dev. Especially since it's strictly hosting static links at this point. It p…

"How much of a burden could this really be?"

My understanding from conversations I've seen about Google Reader is that the problem with Google is that every few years they have a new wave of infrastructure, which necessitates upgrading a bunch of things about all of their products.

I guess that might be things like some new version of BigTable or whatever coming along, so you need to migrate everything from the previous versions.

If a product has an active team maintaining it they can handle the upgrade. If a product has no team assigned there's nobody to do that work.

Re: Google shifts goo.gl policy: Inactive links deactivated, active links preserved

#93

Earlier quoted context omitted.

It may help prevent linkjacking. If an old URL no longer works, but the goo.gl link is still available, it's possible that someone could take over the URL and use it for malicious. Consider a scenario like this: 1. Years ago, Acme Corp sets up an FAQ page and creates a goo.gl link to the FAQ. 2. Acme goes out of business. They take the website down, but the goo.gl link is still accessible on some old third-party cont…

In this little story, what's the difference if the direct ACME URL was used? What does the goo.gl indirection have to do with anything?

Goo.gl was a terrible idea in the first place because it lends Google's apparent legitimacy (in the eyes of the average "noob") to unmoderated content that could be malicious. That's probably why they at least stopped allowing new ones to be made. By allowing old ones, they can't rule out the Google brand being used to scam and phish.

e.g. Imagine SMS or email saying "We've received your request to delete your Google account effective (insert 1 hour's time). To cancel your request, just click here and log into your account: https://goo.gl/ASDFjkl

This was a very popular strategy for phishing and it's still possible if you can find old links that go to hosts that are NXDOMAIN and unregistered, of which there are no doubt millions.

Re: Google shifts goo.gl policy: Inactive links deactivated, active links preserved

#94
post #80

What amazes me is that this wasn't the original plan. What product manager thinks "the best thing for our customers is to delete their data!". > We understand these links are embedded in countless documents, videos, posts and more, and we appreciate the input received. How did they think the links were being used?

> How did they think the links were being used? Can't dig this document up right now, but in their Chrome dev process they say something along these lines: "even if a ferie is used by 0.01% of users, at scale that's a lot of users . Don't remove until you've made solely due impost is negligible". At Google scale I'm surprised [1] this is not applied everywhere. [1] Well, not that surprised

Yup, 0.01% of users at scale is indeed a lot of users.

This is exactly why many big companies like Amazon, Google and Mozilla still support TLSv1.0, for example, whereas all the fancy websites would return an error unless you're using TLSv1.3 as if their life depends on it.

In fact, I just checked a few seconds ago with `lynx`, and Google Search even still works on plain old HTTP without the "S", too — no TLS required whatsoever to start with.

Most people are very surprised by this revelation, and many don't even believe it, because it's difficult to reproduce this with a normal desktop browser, apart from lynx.

But this also shows just out how out of touch Walmart's digital presence really is, because somehow they deem themselves to be important enough to mandate TLSv1.2 and the very latest browsers unlike all the major ecommerce heavyweights, and deny service to anyone who doesn't have the latest device with all the latest updates installed, breaking even the slightly outdated browsers even if they do support TLSv1.2.

Re: Google shifts goo.gl policy: Inactive links deactivated, active links preserved

#95

Earlier quoted context omitted.

"security and maintenance burden" == "cost" == "cost-driven decision"

Capital inputs are one part of the equation. The human cost of mental and contextual overhead cannot be reduced to dollars and cents.

Sure it can. It takes X people Y hours a day/month/week to perform tasks, including planning and digging up the context behind, related to this service. Those X people make Z dollars per year. It's an extremely simple math equation

Re: Google shifts goo.gl policy: Inactive links deactivated, active links preserved

#98
post #80

What amazes me is that this wasn't the original plan. What product manager thinks "the best thing for our customers is to delete their data!". > We understand these links are embedded in countless documents, videos, posts and more, and we appreciate the input received. How did they think the links were being used?

> How did they think the links were being used? Can't dig this document up right now, but in their Chrome dev process they say something along these lines: "even if a ferie is used by 0.01% of users, at scale that's a lot of users . Don't remove until you've made solely due impost is negligible". At Google scale I'm surprised [1] this is not applied everywhere. [1] Well, not that surprised

I guess the number of people who use Chrome to access files via FTP must be below 0.01% then.

https://www.auslogics.com/en/articles/is-it-bad-that-google-...

Re: Google shifts goo.gl policy: Inactive links deactivated, active links preserved

#99

I'll never use a URL shortener again.

could host your own

If you make it read-only, maybe. If anyone can generate a link, wait for your hosting provider to shout at you and ask why there is so much spam/illegal content with your domain. The you realize you can't actually manage a service like this.

Re: Google shifts goo.gl policy: Inactive links deactivated, active links preserved

#100
post #10

Earlier quoted context omitted.

Has there ever been one that survived for a really long time?

Honestly, that's a great question I think I might be doing a self plug here, so pardon me but I am pretty sure that I can create something like a link shortener which can last essentially permanent, it has to do with crypto (I don't adore it as an investment, I must make it absolutely clear) But basically I have created nanotimestamps which can embed some data in nano blockchain and that data could theoretically be a…

1) i think this means every link is essentially public? probably not ideal.

2) you don't actually want things to be permanent - users will inevitably shorten stuff strings didn't mean to / want to, so there needs to be a way to scrub them.

Post reply on HN