News for hackers. Stuff that matters.
Re:Google Credential Provider for Windows by cm2187 on Tuesday April 28, 2020 @02:49AM (#23004202)
And what happens if Google arbitrarily suspends your account?
Re:Google Credential Provider for Windows by wtallis on Tuesday April 28, 2020 @03:06AM (#23004308)
Is that a problem with G Suite? I think all such cases I've heard of have been with the free personal accounts offered to the general public, not the corporate product.

And if random account suspension is something that happens to G Suite accounts, I think the answer is that your IT department's G Suite admins can click the button to un-suspend your account.

Re:Google Credential Provider for Windows by ivank on Tuesday April 28, 2020 @03:59AM (#23004674)
Yes, this is happening to me right now on my G Suite: https://twitter.com/ivankozik/status/1254988039467614209 - no warning and no spam on my part. Every account is disabled, all incoming emails bounce, messages to my Google Voice number are /dev/nulled, my YouTube channel does not exist. Requesting account review as the super admin results in the same "please contact another administrator" autoresponse...
Re:Google Credential Provider for Windows by lima on Tuesday April 28, 2020 @04:12AM (#23004778)
Are you the only admin in your org?
Re:Google Credential Provider for Windows by ivank on Tuesday April 28, 2020 @04:15AM (#23004799)
I think I have one super admin and four regular users, but everyone is disabled.
Re:Google Credential Provider for Windows by zndr on Tuesday April 28, 2020 @11:03AM (#23007667)
This is very strange, but also is your Super admin an everyday user account, or a specific isolated admin account?

Google normally suspends accounts (notification after suspension with no real info) for heavily reported spam, they will suspend a ton of accounts if your domain is sending a ton of spam, even if its not via g-suite directly. This may be the case are you sure your domain is secured?

Re:Google Credential Provider for Windows by ivank on Tuesday April 28, 2020 @11:27AM (#23007916)
Super admin is isolated, not my everyday account.

I don't know how any of my accounts could have been sending spam. I don't send unsolicited email, and I forward messages from those other four accounts to my primary email account, so I hope I would have noticed a spam problem. But because I cannot log in to anything, and didn't get any information or notification from Google, I can't be sure, of course.

I am subscribed to a lot of mailing lists and I wonder if, given my low human outbound volume, whether gmail-generated "bad attachment" bounces could have resulted in this. But that seems unlikely. More likely is someone ran a query and decided I had too many emails or was using too much G Suite storage. I look forward to hearing any information at all from Google!

Re:Google Credential Provider for Windows by jkaplowitz on Tuesday April 28, 2020 @12:11PM (#23008444)
Can the super admin contact G Suite support?
Re:Google Credential Provider for Windows by nikanj on Tuesday April 28, 2020 @12:16PM (#23008503)
This might be strange, but it's not unusual. Google is notorious for banning users, and providing no recourse - except getting your story to the front page of course. HN / Reddit / etc front page is the one true customer service channel they have.
Re:Google Credential Provider for Windows by rkagerer on Tuesday April 28, 2020 @12:28PM (#23008631)
Yes, to some degree?

I had a "personal" account which Google buggered up because it had the same email address as my GSuite one. I never even signed up for GSuite; they forced the migration sometime after they acquired Postini, and I was a happy customer of the latter (and kept paying Google for some time after the conversion).

I got locked out of the personal account, and IIRC stuck in an edge case that needed me to authenticate on Android (can't remember why - some kind of 2FA thing?). Of course the Android login screen didn't accept those @googletempaccount style addresses.

Chased Google for over a year trying to get this fixed. It was difficult reaching any live humans with powers over Accounts. Even brought it up with some devs at I/O. Lots of sympathy, but nobody interested in championing my issue.

In the end I managed to get the account partially recovered, but there are still some Google products for which my data was never seen again (e.g. lost all starred threads from Google Groups).

After the ordeal, I doubt I would entrust Google to replace my DC. Certainly not as much as a third party whose whole business is this and whose revenue depends on maintaining good customer service. Just hope they don't get bought by the juggernaut.

Re:Google Credential Provider for Windows by pjc50 on Tuesday April 28, 2020 @03:18AM (#23004370)
There was an incident reported on HN where the entire gsuite account got suspended without warning..
Re:Google Credential Provider for Windows by gundmc on Tuesday April 28, 2020 @04:25AM (#23004879)
If you're talking about the story I think you are, this was debunked/refuted.

https://old.reddit.com/r/google/comments/8l231x/google_banne...

Re:Google Credential Provider for Windows by SenpaiSilver on Tuesday April 28, 2020 @03:43AM (#23004552)
Was it ever proven to be true/fake? This is the one I think: https://news.ycombinator.com/item?id=17115643
Re:Google Credential Provider for Windows by londons_explore on Tuesday April 28, 2020 @04:01AM (#23004701)
If the gmail address linked as the recovery address for the first gsuite admin on a domain is suspended for a T&C violation, then the whole gsuite domain will be suspended too automatically.

Its a good reason to never link a gmail address as a recovery address for gsuite - always use another free mail provider.

Re:Google Credential Provider for Windows by jkaplowitz on Tuesday April 28, 2020 @12:09PM (#23008417)
For people who have already made that mistake, would switching the recovery address fix it, or is it unfixable?

Also, what if the recovery address is another g suite account in a separate domain?

Re:Google Credential Provider for Windows by SenpaiSilver on Tuesday April 28, 2020 @04:12AM (#23004781)
Would normal users personnal accounts be suspended if set as recovery for their normal work GSuite account if the GSuite admin is suspended?

I personally never link or login with my personnal accounts on work devices, nor do I use work accounts on personal devices.

Re:Google Credential Provider for Windows by londons_explore on Tuesday April 28, 2020 @04:25AM (#23004882)
I don't think so.

T&C violations disable an account and any linked recovery addresses (and accounts with the same recovery phone number).

If an account is disabled, all resources associated are disabled and deleted 30 days later.

A GSuite domain is considered a resource 'owned' by the first admin, so if that account is disabled, so are all in the domain. If it is deleted, so is the domain.

Re:Google Credential Provider for Windows by izacus on Tuesday April 28, 2020 @03:39AM (#23004528)
Huh, can you link to the post?
Re:Google Credential Provider for Windows by dgudkov on Tuesday April 28, 2020 @09:34AM (#23006786)
>And what happens if Google arbitrarily suspends your account?

Well, I guess you can't log in to your own Windows computer. A brave new world as it is.

Re:Google Credential Provider for Windows by mellow2020 on Tuesday April 28, 2020 @03:13AM (#23004349)
If it's the work account, assuming it's through no fault of the user, I would argue that's the best that can happen, since it might make the company think twice about what they are doing in the first place.
Re:Google Credential Provider for Windows by Shorel on Tuesday April 28, 2020 @03:12PM (#23010644)
Hotmail arbitrarily suspended my main email account around 2006-2007.

It was a nice coincidence that someone gave me a Gmail invitation around that date.

However, I had been burned once, and now I have my own domain for the important emails, and that Gmail account is used for things that can be spam.

Lesson: Any huge provider can suspend accounts at will and there's nothing you can do about it.

Re:Google Credential Provider for Windows by livre on Tuesday April 28, 2020 @09:48AM (#23006904)
I think it'll still be possible to log in with a cached password if you disconnect the computer from the network (that's how it works with domain and Microsoft accounts).