News for hackers. Stuff that matters.
Re:Ask HN: Gmail account security by friedturkey on Sunday January 23, 2022 @10:04PM (#30053242)
Google sometimes blocks me from searching using Firefox, saying it’s “suspicious activity” and sending me into captcha hell that always rejects my results after several screens for no reason.

It’s incredibly transparent as to what they’re doing. That Google became the most anti-consumer company out there is pretty disgraceful.

Re:Ask HN: Gmail account security by chefandy on Sunday January 23, 2022 @11:26PM (#30053740)
I use google constantly— sometimes hundreds of times per day— both logged in and out, almost exclusively in Firefox or Firefox developer edition and I've never encountered this. I'd bank on it being a network thing— VPN, overcrowded proxy, etc.
Re:Ask HN: Gmail account security by paulryanrogers on Sunday January 23, 2022 @11:37PM (#30053799)
The beauty of AI is that it's likely no human can say precisely why two similar users might get a different classification.
Re:Ask HN: Gmail account security by chefandy on Monday January 24, 2022 @04:13PM (#30064119)
I'm not saying the browser isn't a factor, or that Google isn't anti-consumer, or anything else. The original comment didn't say they were caught up in some unobservable AI machination. They made a pretty straightforward observation mentioning only two conditions: Google bounces them when using Firefox. From that, they jumped to a pretty straightforward conclusion— Google transparently harasses Firefox users to advance their corporate strategy.

I'm not going to jump through hoops to prove a negative, but correlation does not imply causation.

My empirical observation: For many years I have constantly used Google search on FF with many machines and networks, logged in and not, in private mode and not, with all existing privacy features enabled and no extensions beyond a password manager. Napkin math conservatively estimates I've conducted 200k searches minimum using this combo. I've consistently encountered suspicious activity challenges when using overcrowded proxies, NAT'd networks and VPNs. Removing those factors has never failed to stop the challenges. Ever.

I'm confident the poster's observations are accurate. My observation does not directly contradicts their observation, but it does contradicts their conclusion. I wouldn't be surprised if other factors like JS being enabled, cookie settings, plugins that affected those things, number of other users on their network, or even the public IP range they fall under would affect it.

Re:Ask HN: Gmail account security by cbsmith on Monday January 24, 2022 @12:44AM (#30054097)
...and the beauty of the Internet is that there's really no way to be sure people are being genuine...
Re:Ask HN: Gmail account security by onion2k on Monday January 24, 2022 @01:36AM (#30054305)
Which is why it's better to believe people until you have a clear reason not to, in case they are genuine.

https://en.m.wikipedia.org/wiki/Principle_of_charity

Re:Ask HN: Gmail account security by laserlight on Monday January 24, 2022 @02:12AM (#30054473)
It's not that important whether these reports are genuine or not. The important point is that many people are not surprised by these reports. Google has long failed people's trust in them.
Re:Ask HN: Gmail account security by eitland on Monday January 24, 2022 @01:11AM (#30054204)
Long time Firefox user and HNer here.

I've at least been "captchaed" in Firefox. While being logged in with my Gmail account from 2005.

Re:Ask HN: Gmail account security by cbsmith on Monday January 24, 2022 @05:20AM (#30055665)
I've been "captchaed" with Chrome, so I'm not sure the anecdotes amount to much.
Re:Ask HN: Gmail account security by eitland on Monday January 24, 2022 @10:30AM (#30058833)
That's interesting and useful to know and I decide to believe you.

BTW: Yes, I absolutely noticed that you said this above:

> ...and the beauty of the Internet is that there's really no way to be sure people are being genuine...

My point is, unless the claims of the others are outrageous or we have something very specific to point at, I don't think voicing these kind of thoughts do much good.

Re:Ask HN: Gmail account security by iKevinShah on Monday January 24, 2022 @01:56AM (#30054394)
tbf, that is the beauty of people in general and not the Internet
Re:Ask HN: Gmail account security by pllbnk on Monday January 24, 2022 @03:39AM (#30054920)
I have had the same experience the previous commenter had when I'm on my phone. It would happen quite randomly and sometimes the captcha hell would resolve and I could go back to normal search, while other times it would go into infinite loop. Check back in an hour and you're fine. It's a disaster and at times like these I am so glad there's at least some competition I can go to for search.
Re:Ask HN: Gmail account security by bjoli on Monday January 24, 2022 @01:50AM (#30054363)
I get it ln firefox without a VPN with my own IP owner by a reputable ISP. On a pixel phone with google DNS.

On a VPN I do not get it, so the last couple of weeks I have been making heavy use of my mullvad account.

Edit: however. I only store cookies for fastmail and hacker news and do not allow JS on many sites.

Re:Ask HN: Gmail account security by DavideNL on Monday January 24, 2022 @06:28AM (#30056237)
That would make sense, Google can easily track you if you always use the same IP. It's their business, they track you and sell your data so they can provide their product for "free".
Re:Ask HN: Gmail account security by entropie on Sunday January 23, 2022 @10:22PM (#30053363)
> Google sometimes blocks me from searching using Firefox, saying it’s “suspicious activity” and sending me into captcha hell that always rejects my results after several screens for no reason.

That happend to me only when using tor.

Re:Ask HN: Gmail account security by option_greek on Sunday January 23, 2022 @11:40PM (#30053812)
Use private mode exclusively. You will start getting into the captcha hell in a day or two.
Re:Ask HN: Gmail account security by srg0 on Monday January 24, 2022 @02:20AM (#30054511)
I configured Firefox to delete all cookies on exit, except few whitelisted sites. So most of the time I have to accept Google privacy policy if I search there. Other than that, I never got into the captcha hell when trying to do a Google Search.

There are some sites I can't login at all unless I change the browser. SoundCloud is one of them.

Re:Ask HN: Gmail account security by option_greek on Monday January 24, 2022 @03:32AM (#30054873)
Could be that IP Address/ISP reputation is also a factor for the variation in results.
Re:Ask HN: Gmail account security by kome on Sunday January 23, 2022 @11:31PM (#30053771)
that happens to me all the time, i have no idea why. i'm using firefox.
Re:Ask HN: Gmail account security by heavyset_go on Monday January 24, 2022 @05:32AM (#30055783)
In the same vein, check out what Bing did when I searched for "Firefox" with Edge[1].

[1] https://news.ycombinator.com/item?id=28517187

Re:Ask HN: Gmail account security by Gigachad on Sunday January 23, 2022 @10:47PM (#30053503)
Any reason as to why they might be doing that? VPN? "resist fingerprint" setting? School/public wifi network?

Usually when they do that its because you are on the same network that a lot of abuse has come from.

Re:Ask HN: Gmail account security by 20after4 on Monday January 24, 2022 @01:54AM (#30054386)
Is it possible that your requests are coming from an IP address that google has flagged for previous abuse? I think that the "suspicious activity" captcha hell is triggered by a high request volume from multiple not-logged-in agents on the same IP. At least that's been my experience in the past.
Re:Ask HN: Gmail account security by kayxspre on Monday January 24, 2022 @03:05AM (#30054729)
Doesn't have to be not logged-in. Years ago I use Chrome (with myself logged into Google) to search for very specific queries, so I have to use multiple operators (double quotes, "site", "filetype") in one search to narrow the result. I was hit with CAPTCHA as soon as I browse to page 2 of the result. This happens many times, so I have to do this kind of search at different times to make sure it doesn't see me a heavy traffic at any point.
Re:Ask HN: Gmail account security by rotten on Monday January 24, 2022 @10:02AM (#30058413)
We used to have this happen at an office I worked in where the SEO team was scraping google search rankings by running thousands of queries with different search keywords. Google was blocking the IP address rather than our browsers.
Re:Ask HN: Gmail account security by vanviegen on Monday January 24, 2022 @01:21AM (#30054242)
Sounds like your browser (or a plugin) might be blocking some cookie or connection that Google uses for security?
Re:Ask HN: Gmail account security by chimen on Sunday January 23, 2022 @10:16PM (#30053327)
fake your browser header to a chrome variant.
Re:Ask HN: Gmail account security by syncbehind on Sunday January 23, 2022 @10:30PM (#30053408)
That doesn't get rid of the problem, it only prolongs it.
Re:Ask HN: Gmail account security by eru on Sunday January 23, 2022 @10:44PM (#30053481)
The header isn't the only thing that identifies a browser.

A faked header might look even more suspicious to their algorithm?

Re:Ask HN: Gmail account security by inopinatus on Monday January 24, 2022 @12:56AM (#30054158)
Hanlon's razor applies here, though.
Re:Ask HN: Gmail account security by colordrops on Monday January 24, 2022 @01:09AM (#30054202)
No it doesn't, rockefeller's razor applies - don't attribute to stupidity what could be adequately explained by profit motive.
Re:Ask HN: Gmail account security by inopinatus on Monday January 24, 2022 @12:06PM (#30060489)
There is no such razor.