News for hackers. Stuff that matters.
Re:Ask HN: Gmail account security by steelframe on Sunday January 23, 2022 @10:53PM (#30053549)
Once upon a time I worked at Google.

I returned to Austin to visit old friends and took the opportunity to visit the Google office there. The Googlers sitting around me were primarily corporate sales.

They weren't getting any corporate sales calls at all as far as I could tell, but there was one extremely irate user who was locked out of their GMail account and was repeatedly calling them because they were the only human beings at Google the user was able to get in touch with, via something like "Press 3 for Corporate Sales." Of course these poor Google corporate sales people had absolutely no way to help this user even if they wanted to. Google literally did not have any GMail account phone support (at least at the time).

I could hear the poor guy screaming through their headsets about how he paid Google something for some service and was entitled to phone support and he demanded someone help him, but they just kept saying, "This is corporate sales. We do not offer consumer account support. If you want support, please visit the Google Support Forums at www dot..."

After they hung up on him 3 or 4 times, eventually a manager got on the phone and told him (between his screams), "Look, you're not getting any phone support because it doesn't exist. There's nowhere for us to transfer you. There's nobody who can call you back about this. Your only option is to search the forums for an answer to your problem. I am going to terminate this call now. Sir, I'm going to terminate this call. No, we can't help you. Nobody at Google can help you. I am terminating this call now. We asked you to stop calling this number. Do not call us again. <click>"

I'd frequently tell my co-workers, "If you're not paying for it, you're the product." That experience underscored that notion for me.

Re:Ask HN: Gmail account security by zxcvbn4038 on Monday January 24, 2022 @01:41AM (#30054327)
Even when you have paid Google products that come with support, it is really awful. They once asked me to submit a business case justifying how answering my support question benefited Google. Just a simple clarification of something in their documentation. I was already under pressure to migrate to Office360, I stopped fighting after that.

My employer is a huge AWS user and Google is constantly chasing us with a treasure chest of free credit to migrate over, their prices are significantly cheaper, but everyone agrees it’s worth the premium to stay with AWS simply because they answer the phone.

(If you have never used AWS’s enterprise support, those guys are worth every penny.)

Re:Ask HN: Gmail account security by julienfr112 on Monday January 24, 2022 @03:15AM (#30054790)
I've first hand experience with managing a google workspace (50 users) and an Azure AD (30 users). With google workspace, the chat is two click away and the guys now their stuff. With Azure AD, no support, no chat, except "here is a list of consultant in your area that provide support". And I pay twice as much to microsoft ...
Re:Ask HN: Gmail account security by michaelt on Monday January 24, 2022 @03:39AM (#30054922)
I work at a company with >1000 google workspace users.

That's enough that someone at Google will acknowledge what you're reporting is a bug on their end, and that they can reproduce it. But it's not enough to get the bug fixed.

The support may be good if you're asking questions they've heard before - or if you need something like an account lock reset, which the support folks have a button for. But if the problem you're encountering requires a code change? Not so much.

(If you're wondering, the bug is "in Google Drive, users with third-party cookies disabled get stuck in a redirect loop when downloading files or viewing videos, as the cross-origin request to googleusercontent.com attempts to redirect to get an auth cookie that never arrives" )

Re:Ask HN: Gmail account security by zxcvbn4038 on Monday January 24, 2022 @04:08AM (#30055085)
I’m sure that in the mind of Google they are doing a favor by letting us give them money, wanting support is just ungrateful. Wanting a bug fix is just obscene. They have 150,000 PhDs, aren’t we bold to question them!
Re:Ask HN: Gmail account security by HeavyStorm on Monday January 24, 2022 @07:00AM (#30056557)
This stems from Google not being a service company. Support for products is mostly like this. You can submit a bug report but that does not mean they will help you.

We have a saying here that goes something like "don't buy pizza at a burger joint"... Don't buy services from a advertising / products company.

Re:Ask HN: Gmail account security by throwawayvibes on Tuesday January 25, 2022 @06:17AM (#30070570)
>Don't buy services from a advertising / products company.

I will remember this. Thanks.

Re:Ask HN: Gmail account security by angry_octet on Monday January 24, 2022 @06:40AM (#30056344)
Turns out, having a PhD is a negative when it comes to closing bugs.
Re:Ask HN: Gmail account security by woko on Tuesday January 25, 2022 @05:36AM (#30070323)
> I work at a company with >1000 google workspace users.

> That's enough that someone at Google will acknowledge what you're reporting is a bug on their end, and that they can reproduce it. But it's not enough to get the bug fixed.

I will try to remember that the next time I deal with an open-source project, either as a user raising an issue, or as a project contributor helping solve such issues.

Often, we do not realize how lucky we are that contributors to open-source projects help fix the bugs which we report.

Re:Ask HN: Gmail account security by blfr on Monday January 24, 2022 @06:46AM (#30056402)
That must have been fixed. I got a message to enable third party cookies for drive.google.com. Even with a link to docs on how to do it iirc.
Re:Ask HN: Gmail account security by michaelt on Monday January 24, 2022 @08:36AM (#30057389)
I just tested, and it's not fixed.
Re:Ask HN: Gmail account security by tomxor on Monday January 24, 2022 @08:33AM (#30057354)
I hesitated to post this comment, another anecdote with zero recourse... Then realised the fact I hesitated is more concerning.

Google hold too much control over the internet and the majority of internet users lives, to the point where it's almost authoritarian: They can screw with your personal life and potentially your business without any recourse, causing the effects such as the one I just experienced. I'm not suggesting some large conspiracy against those who oppose Google's affect on the web, and many of us will continue to complain openly and loudly about them because that is our culture. But the effect their position has on freedom of speech is still present, it's a natural instinct, it increases the chances of a large portion of the population to remain silent out of personal fear - and that is concerning.

Re:Ask HN: Gmail account security by dandare on Monday January 24, 2022 @06:37AM (#30056310)
> Even when you have paid Google products that come with support, it is really awful

Once I subscribed to YouTube Music (paid!) family plan, but my wife's account would always say that she is in another country and can not join the plan. I tried everything - the support never even bothered to reply to my emails. I cancelled the plan and since then I keep seeing the same ads for the premium service every time I open the YT mobile app.

Re:Ask HN: Gmail account security by gwd on Monday January 24, 2022 @06:44AM (#30056378)
FWIW I had the same problem a few months ago, and they did eventually sort me out. This surprised me, given Google's reputation. I was on the 1-month "free trial" membership, and always planned to switch to the single-person membership if they didn't get it sorted out, so I wasn't really out any money during that time.

(And in fact, what actually happened was they hadn't sorted me out by the time the free trial was up, so I cancelled it and switched to the individual membership. They managed to get things sorted out a week or two after that, but I'm still on the individual membership; my wife just shares my account ID.)

Re:Ask HN: Gmail account security by deusum on Monday January 24, 2022 @02:36PM (#30062775)
I can second that. Lots of G services think I'm in another country (Spain specifically), so the sites load in Spanish by default, along with other minor headaches.
Re:Ask HN: Gmail account security by staticelf on Monday January 24, 2022 @07:22AM (#30056773)
I work for a small company and we used to use AWS. I think their support sucks. Especially since there is no group accounts and the bills went to another persons account that ended his job at the company.

I had to login to both mine and his account in order to complete my support request or they wouldn't help me. When I called them it was like any crappy indian support team which I barely could understand.

Compare that to DigitalOcean for example, there you can actually group resources for an org and their support is actually knowledgeable about their products and can answer questions even about implementation details. Also, you don't need a PhD in order to understand the UI which is a great plus.

Re:Ask HN: Gmail account security by scrollaway on Monday January 24, 2022 @03:11AM (#30054766)
> They once asked me to submit a business case justifying how answering my support question benefited Google.

I find that extremely difficult to believe without more context. Google support isn’t that bad. I’ve had a mediocre-to-good experience with it over the years.

With that said, while I agree that aws business and enterprise support is worth the hundreds to thousands of dollars a month, so is the five bucks a month for a google workspace account that includes support.

Re:Ask HN: Gmail account security by kikimora on Monday January 24, 2022 @04:24AM (#30055202)
A few years back I wanted to call then but didn’t find a number. How do you contact Google’s support?
Re:Ask HN: Gmail account security by scrollaway on Monday January 24, 2022 @04:47AM (#30055366)
If you have a google workspace account and need google support, you can go in the admin console, help section in the top right, there is a contact form with phone and chat options.
Re:Ask HN: Gmail account security by afandian on Monday January 24, 2022 @05:05AM (#30055541)
What if you can't log in?
Re:Ask HN: Gmail account security by scrollaway on Monday January 24, 2022 @05:59AM (#30056003)
Then there's this magic link: https://support.google.com/a/contact/recovery_form (calling it magic because it's not very obvious how to find it; I had to look it up in the HN comments)
Re:Ask HN: Gmail account security by LightG on Monday January 24, 2022 @04:26AM (#30055224)
Can confirm. Despite strong reservations about moving from one behemoth to another, the support from Amazon has been light years better (both on the consumer side and AWS). Embarassingly better.
Re:Ask HN: Gmail account security by laserlight on Monday January 24, 2022 @05:52AM (#30055939)
> Google is constantly chasing us with a treasure chest of free credit to migrate

The only item in Google's business playbook...

Re:Ask HN: Gmail account security by leoh on Sunday January 23, 2022 @11:14PM (#30053670)
You are actually pointing out a tremendous opportunity that Google has internally and externally. I work at Google and recently tried to file a bug about the calculator embedded in search. It was dastardly difficult to find how to file the ticket. It took me maybe an hour. A better system for filing tickets internally and for filing and triaging tickets from external users would be a tremendous asset for Google.
Re:Ask HN: Gmail account security by graderjs on Monday January 24, 2022 @12:01AM (#30053906)
I guess this is why Amazon is playing the long game with their obsessive focus on customers. I don't know how that really plays out where the rubber meets the road but that's what Jeff bezos always keeps talking about.
Re:Ask HN: Gmail account security by dleslie on Monday January 24, 2022 @12:06AM (#30053922)
It plays out with Amazon absolutely crushing Google when it tried to be a consumer marketplace, and even trouncing Google at providing web infrastructure services.

If, somehow, an antitrust ruling split ads from the rest of Google the non-ads remainder wouldn't last more than a few years.

Re:Ask HN: Gmail account security by alexb_ on Monday January 24, 2022 @05:04AM (#30055531)
Alphabet as a whole is an organization built by the immense money that comes from monopolizing digital advertising (through some very... unscrupulous means) and then run by people deluding themselves into thinking they can do anything else. There's a reason everything is "killed by google" - I'm not exactly sure anyone there knows how to do damn near anything that isn't propped up by investor hype and the money they make from ads and other strictly profitable ventures such as GCP. Alphabet only has the ability to do immensely stupid things because their core business gives them damn near infinite money to play with.

You are 100% correct in that ads are the ONLY thing propping up google as a business. This is probably a very bold prediction, but I think that when money starts getting more expensive, when rich billionaires are more reluctant to just throw money at inane, borderline speculative bullshit, there will be a massive hemorrhaging of unnecessary business. And maybe this is a little out there but... you know how YouTube doesn't actually make any fucking money?

Interesting things to think about for sure.

Re:Ask HN: Gmail account security by GFischer on Monday January 24, 2022 @02:11PM (#30062414)
The YouTube thing is false as of a few years ago. If you have noticed, they've crammed it full of ads.

https://www.theverge.com/2021/7/27/22596592/google-q2-2021-r...

I think it's projected to earn 20 billion this year.

Re:Ask HN: Gmail account security by alexb_ on Monday January 24, 2022 @09:42PM (#30067239)
Thanks for this. I've heard recently that, in its current form, digital advertising is extremely overpriced and propped up by misleading metrics [1] and might take a downturn in the future, but I also don't really know much about it and and that point it's just speculation.

[1] https://hbr.org/2021/02/what-digital-advertising-gets-wrong

Re:Ask HN: Gmail account security by graderjs on Monday January 24, 2022 @05:51AM (#30055929)
Not sure about that... It could be a blessing for the tech community if that happens. Let's consider 3 parts: Ads, Cloud and Labs. Alphabet could fund Labs as research arm (basically what it is anyway, with all the exploratory projects) and could like see a revival of the golden days times of Bell Labs, Xerox Park, etc.
Re:Ask HN: Gmail account security by stiray on Monday January 24, 2022 @01:14AM (#30054211)
Really?

I am locked out of my (10+ years old) account for almost two years, due to "security reasons" (I have valid OTP so I call this BS and my credit card has changed in between so the account is useless for anyone), they want me to call some number in states, but I am not giving my phone number away, which is also the reason why I don't create new account.

I have calculations, in last two years I have bought 4378 EUR online. This could be collected by Amazon - but now it isn't.

I am still waiting when they will come to their senses and figure out that locking out users (especially if they made quite a few purchases) longer than few months is counterproductive.

Meanwhile they are losing money they could earn. Good job.

Re:Ask HN: Gmail account security by graderjs on Monday January 24, 2022 @03:16AM (#30054791)
I'm not sure how you came to be in this unfortunate situation but this is one of the reasons I purposely memorize my passwords rather than store them in a password locker or Auto filler that I could lose access to. I guess if I lose access to my brain I'm not going to be worrying about what I might owe for those instances that I never killed on that cloud service.
Re:Ask HN: Gmail account security by monort on Monday January 24, 2022 @04:22PM (#30064228)
Just use a phone number from a service like temp-number.org. After logging in you will be able to remove it from your account.
Re:Ask HN: Gmail account security by alephnan on Monday January 24, 2022 @12:57AM (#30054159)
I worked at both Amazon and Google. It was only at Amazon where I was exposed to the Craft of software development. Personally, I feel there is a nuanced difference to the role at Amazon being SDE ( Software Development Engineer ) whereas Google is SWE ( Software Engineer ). It's almost like Google thinks Software Developers are lower tier than Software Engineers, but I'd like to think of myself as doing more than just engineering and tweaking things which already exist.

The team I was on at Amazon every line of code felt purposeful. At Google it's just Java charades. One time we were propping up a new micro service that received data from one data source, transformed it to another data source. That's it. No other API calls, no algorithms, no design patterns, no filtering, just deserialize/serializing/renaming fields between two data formats 1:1. It's literally a few dozen lines of code. I was the project lead and was likely going to be sole person responsible for it, and I proposed it be written in Go. It took to me 2 days to implement it in Go. Our manager wanted it rewritten in Java, because no one on the team knew Go and in his opinion would want to learn Go. The Java rewrite took a month to get to an MVP "Hello World" state, and another month to calibrate the codebase with the rest of our projects. It takes days to learn Go, less than a month to be well-versed in Go's standard library. Its package management is simple but also sane. Years working with Gradle and there is still weird stuff popping up every so often. The microservice depended on some Google "public" client libraries. At least with the Go libraries it's feasible to read the entire source code and flesh out things on the edge of documentation. Go's limitations also means code tends toward being idiomatic and standard. Besides the Maps API and some GCP products that receive attention, most of the APIs/libraries feel half-baked for external consumption. Documentation is a big piece of it. I'm not sure what the state of AWS documentation is nowadays but, on my Amazon team, we were co-developing documentation and code in unison, like how people iterate between test/code.

At Google, documentation feels like an after the fact dread so that a bunch of suits ( dressed in jeans and t-shirt ) can green light the project and sign off on a laundry list of due diligence of "product excellence". The final product is documentation that centers around a Hello World, but after that you're often not sure how to proceed. You're instructed to run a bunch of commands serially without much context, basically the fish, but you didn't really learn how to fish. Beyond this imperative 'Hello World' style documentation is nuanced callouts and notes for some esoteric cases for exhaustive coverage purposes that is just really distracting for 99% of clients. Basically don't sue us, we made sure to mention is in documentation. I've worked extensively with the Google Cloud documentation org, and they are really problematic. Google is usually too nice ( or maybe it's just the game dynamic of everyone having cushy job ) to fire people, whereas Amazon would go in a "different direction". I don't see this documentation problem going away until there is leadership who isn't afraid to fire people, which is also unlikely to happen as the well intentioned engineers will quickly rally to dispose of this style of leadership. One time the documentation org held a session for internal developers to provide feedback because clearly documentation is not serving the customers. They were shutting down every idea and interrupted in mid-sentence, only agreeing with things that confirmed/supported their agenda. Then working 1:1 with members of the documentation team to launch a product, I realized the individuals also succumbed to selective hearing. They're like recruiters who just scan for buzzwords like 'REST', 'HTTP', and so Google documentation has random sentences explaining to technical clients of a specific technical API what REST, HTTP, gRPC is. The intended audience are paying clients, and I'm not talking about hobbyists, not students who are not familiar with cURL yet, but the documentation writers are effectively the latter. I admit, the documentation staff write more fluid English than I do, but what's the point if they introduce a bunch of superfluous, sometimes even semantically meaningless, sentences wherein readers of documentation can't discern the forest from the trees? It became a second job for me to revise the documentation, and my manager wasn't supportive nor appreciative of me doing this non-engineering work. That's when I started planning my resignation. If Google is serious about cloud and developers, the problem can be solved by paying actual engineers to write documentation.

Code Review at Amazon felt constructive with the user in mind. Code Reviews at Google felt reductive to the pet peeves of the reviewer and minimizing conflict. On that team at Amazon, performance was actually a priority. I actually felt like my Computer Science degree was put to use, but not in a pretentious, ivory tower, scratching your own itch/ego kind of way. The latter opportunities are more common at Google. The Amazon team built their own dependency injector and markup language, not because it was something to brag about, but it was solving an unmet need at the time. HackerNews never forgets about the long list of products Google abandons, but there are also the projects that are dead in the water. At Google, I was adjacent to a team reinventing HTML but defined in YAML, with less functionality and composability than HTML but implicitly requires you to already know HTML. Probably 10,000 humanhours were allocated to this project. The team are exclusively from infrastructure backgrounds. No one wants to say this, but there is a belief, at least based on my impression of Google hiring practices, that backend engineers have higher aptitude, therefore you can train them to be frontend engineers. I don't think this is true. Ironically, when I interviewed at Microsoft they actually asked me interviewing questions requiring browser APIs and interacting directly with the DOM. When I was the technical interviewer at Google, asking candidates such practical questions rather than Leetcode-style problems tripped them up way more. On the Amazon team I worked with, everyone's first programming language is JavaScript. We directly fiddled with the DOM which goes against all the modern web framework abstractions, VanillaJS, native browser APIs, minimal transpiling for compatibility. This was code 1-degree removed from the user and, ironically, as we were fiddling with the DOM and exposing ourselves to all the dangerous state, nothing bad happened. Then again, we sent people to the moon with much less. At Google, I felt n-degrees removed from the user, while standing on top of many more abstractions and yet in many product areas besides things like Search, 99.5% felt good enough, whereas at Amazon I truly believed in 99.999%. On the Amazon team we leaned on Prototypical "inheritance" and embraced JavaScript, rather than trying to fight it, shoe-horning in Java style Classes, because Google ultimately is a Java shop. Angular has singletons, factories, and other symptoms of people exercising their extensive knowledge on the design patterns in Gang of Four. Meanwhile at Google, I saw triply nested for-loops that I refactored to linear time. It wasn't really appreciated, because on the grand scheme of things, Google focuses on being planet scale, which might explain why SMB / hobbyist support for GCP is mediocre. Indeed, Google infra and internal tools are the best. Possibly even over-engineered where there is diminishing returns, possibly inflecting down on productivity because the tools handles too much for you that you are now responsible for knowing its extensive features and capability set. There's always someone who knows, but you gotta make sure you've done your research before you come to them without extensive due diligence. At other places I've worked, including Amazon, I think there is less anxiety in knowing that you don't know and ignorantly reaching out for help because we're all fools anyways. Google has publicly mentioned that they found no correlation between academic GPA and job success, but I'd bet there is a high degree of imposter syndrome. In practice, Google still selects for the academically excellent, where from an academic and school setting you are expected to know the "right answer", but software engineering is an art not a science.

Products, however, are different story. I am back in school, and the school decided to use Google Classroom. This thing has a 1.5/5 rating on the Apple app store. I'm curious how many people work on it. I apologize if it's a lone developer. But I wouldn't be surprised if this was a team of 3-4+ engineers, a product manager, a manager, a UX designer, a UX researcher. Google Classroom, at least in my school's usage, is just a feed of posts. A Facebook group would have sufficed and been much better. I'm imagining there's a sales team for Google Classroom. At least Google's improving on the non-search/Ads business front.

Re:Ask HN: Gmail account security by ChicagoBoy11 on Monday January 24, 2022 @08:05AM (#30057090)
I'm a developer and a school admin, so I can comment on the Classroom point, at least: It is so comically clear that Classroom really was someone's clever idea to simply take existing Google Drive APIs and then create an LMS-like environment using that. Taken like that, it's actually brilliant and super clever.

The not-so-brilliant-and-clever part is that by virtue of being free and Google having so many schools captive with free GoogleEDU + Chromebooks, this is something running millions' of kids' schooling, especially now during COVID. But it seems, at every indication, to continue to be someone's pet Google Drive API project, so you see some insane feature omissions because it is clear it would probably require some sort of actual original development work besides the very minimal UI and overhead that Classroom provides. I need to thread lightly, though, 'cause I've made decent money (and had fun) implementing quite a few of these for my own school, but every single time its been clear to me that EVERY OTHER SCHOOL IN THE UNIVERSE would also want/need things like that.

Re:Ask HN: Gmail account security by throw10920 on Monday January 24, 2022 @02:34PM (#30062748)
I'm also a developer and an educator using Classroom for a small class. Your insight makes it crystal clear why I always thought that Classroom was completely insane, to the point where I was wondering why nobody else said anything and maybe I just wasn't "getting it" - no, it's because it's basically a clever hack that's a Googler's side project (that maybe now has a small team around it).
Re:Ask HN: Gmail account security by ChicagoBoy11 on Monday January 24, 2022 @02:46PM (#30062937)
As a fun exercise, I'd encourage you to peruse even their apps script APIs and see how quickly you can actually get something like "google classroom" up and running for yourself, minus some of the UI candy. Truth-be-told their documentation and what they expose to you is pretty rich, and along the way you then start seeing exactly why "Google Classroom" things are the way they are hehehe.
Re:Ask HN: Gmail account security by alephnan on Tuesday January 25, 2022 @03:09AM (#30069428)
This is enlightening.

I do see they have a marketing / landing page which makes me feel there is a product charter beyond half-a-SWE: https://edu.google.com/products/classroom/

Re:Ask HN: Gmail account security by graderjs on Monday January 24, 2022 @03:14AM (#30054784)
Awesome informative answer. Thank you so much! this is like the kind of nuanced detailed thing would be good to see on Glassdoor
Re:Ask HN: Gmail account security by ftrobro on Monday January 24, 2022 @07:27AM (#30056800)
Thanks for the insights! Surprising that Go met resistance internally at Google, considering that Go is created by Google and that Google have been sued by Oracle for using Java in Android.
Re:Ask HN: Gmail account security by sbst32 on Monday January 24, 2022 @09:05AM (#30057653)
It's a bit ironic that you're bashing Google and praising Go in the same paragraph, never mentioning that Go is designed and supported by Google.
Re:Ask HN: Gmail account security by colejohnson66 on Monday January 24, 2022 @11:10AM (#30059439)
I think that was part of the point. Google made Go and then when OP wanted to use Go, their bosses said “use Java” (and took a month to do something that could be done in a few days)
Re:Ask HN: Gmail account security by mangodrunk on Monday January 24, 2022 @03:08PM (#30063259)
I disagree with OP on this. Their boss in my opinion made the right call. I'd say for a few reasons:

1. Why did OP do this without talking through it first

2. Introducing a new language to a team is not some small decision, and IMO typically not a good idea

3. Why would it take a month in Java to do what takes a few days in Go

4. If it made this one task faster, the burden it will put on the team in the future can be bad in the long run

Perhaps the team would benefit a move to Go (I doubt that), but it should be something that is planned. Otherwise, they'll have "that" one thing that is written in a language that no one on the team really knows.

Re:Ask HN: Gmail account security by alephnan on Tuesday January 25, 2022 @01:29AM (#30068833)
> Their boss in my opinion made the right call. I'd say for a few reasons:

Well you don't have enough context to say it was the right call.

> 1. Why did OP do this without talking through it first

I was tasked to prototype / MVP / "tracer dart" and prove that it was feasible. As proven, it took 2 days in Go. If it was done with Unix commands, the pieces can be jumbled together in a day. The point was having a self-contained "documentation via code" example of the exact business logic in such a program. The same can be achieved with a shell scripting language, but it wouldn't have been as readable. Go is about readibility, which is exactly the reason why it was invented Google, because Google prioritizes readibility. Java is readable if you know what idioms and style it's in, but it's also verbose, which is distracting. One, communicating with the source and sink. Two, get an initial picture of nuances in the Protobufs and data format. It happens to be that the Go prototype was 85-90% close to a final solution. In Java, after being able to actually bundle and consume the libraries had undocumented idiosyncrasies. Java is more powerful and thus more flexible, so a Hello World solution could might be in the wrong direction. You have options, no pun intended, on how you handle async.

> 2. Introducing a new language to a team is not some small decision, and IMO typically not a good idea

There was already half a dozen programming languages on the team's codebase, include a Go server which we inherited. So in effect, we should know Go anyways. As much as Google is Java shop, engineers are polyglot and not hired for a single language, in theory.

> 3. Why would it take a month in Java to do what takes a few days in Go

The language itself. Async code is verbose. Opinionated debates over variables should use the keyword final. Debating whether to use inheritance, delegation, function, or whatever composition / code-reuse pattern. It's been empirically shown Java programs are more verbose than other languages, both in tokens and in LoC. Complexity and entropy doesn't scale linearly, either. This is reflected in both client code and library code, which in the case of Google for many libraries is stale and misleading. One such library is authentication. For Java, Google has multiple competing libraries, or you can carve authentication features out of another feature library, but that is wrapped around and pegged to an older version. Something like JavaScript, there is 3 public sets of documentation on OAuth2 in JavaScript, and like 2.5 clients. With Go, there is a single canonical version, and so just figuring out what library you should use is a fraction of the troubles.

Then there is the ecosystem as a whole. You have options for logging library, and getting Gradle and the building system to pull in the dependencies, especially when you are on internal networks, is one thing. Aligning the Gradle build to be consistent with idiosyncrasies of the team's existing codebase is another. You can do inheritance with Gradle, and that's what was involved to be "consistent", because copy-and-pasting code is a no go.

> 4. If it made this one task faster, the burden it will put on the team in the future can be bad in the long run

That's a strawcut. What you are referring to is taking shortcuts, choosing a suboptimal solution because it saved time. Go was purpose built for middleware and microservices. It was the tool for the job, independent of how long it took to build the MVP. Beyond that, tess code is always better. If there was less code needed to build it, there is less code to maintain.

Google cares about code readability. This is exactly why Go was invented. Go is built readable language. Readability is what engenders low maintenance cost burden.

> Perhaps the team would benefit a move to Go (I doubt that)

No, it was not about a wholesale migration to Go. It was about using the right tool for the job, in one specific microservice, instead of having the Java and turning everything into a nail. Imagine if a company was a PHP shop and said everything had to be written in PHP. Frontends, backends, MapReduce jobs. This is the whole point about federating to microservices instead of monoliths. Or JavaScript, JavaScript everything. Hey, that's not bad, Coinbase was built solely on JavaScript. The argument might make sense if this was an esoteric language or a Lisp, but this is Go, which is, in theory, an official programming language at Google.

Re:Ask HN: Gmail account security by mangodrunk on Tuesday January 25, 2022 @11:56PM (#30081899)
Thanks for adding more context.

You do seem to be making assumptions and having expectations on how the team and how Google should operate. Regarding Java, I don't find the claims that Java isn't as good as Go compelling. For you, sure, but to make general claims is silly. There are many successful companies and productive developers using Java.

There are probably companies that are very productive in how you would want to pick and choose languages based on the problem. IMO, the language choice is not all that important, though I do think PHP, JavaScript, and similarly poorly designed languages are probably a hinderance (but again there are many successful companies using these like you said, so I think that's convincing that the language doesn't really matter all that much).

Re:Ask HN: Gmail account security by sbst32 on Monday January 24, 2022 @06:23PM (#30065575)
It could be part of the point but it does not sound like it.

It could say - Google is bad in that and that BUT it has Go. Or it could say - Google designed Go and is interested in its adoption BUT its own managers don't think that Google developers want to learn Go.

But instead it says that Google documentation "does not teach you how to fish" and "you're not sure how to proceed" and at the same time Go somehow gets away with it - "At least with the Go libraries it's feasible to read the entire source code and flesh out things on the edge of documentation".

Re:Ask HN: Gmail account security by alephnan on Tuesday January 25, 2022 @01:38AM (#30068872)
> It could say - Google is bad in that and that BUT it has Go. Or it could say - Google designed Go and is interested in its adoption BUT its own managers don't think that Google developers want to learn Go.

It's implied. In fact, Go is an "officially" supported language, meaning there is a dedicated team to maintain tooling around the Go ecosystem, sweep for security issues, keep "runtimes" (in this case the compiler and binaries) up to date.

> But instead it says that Google documentation "does not teach you how to fish" and "you're not sure how to proceed" and at the same time Go somehow gets away with it - "At least with the Go libraries it's feasible to read the entire source code and flesh out things on the edge of documentation".

If documentation is going to be equally bad either ways ( that's something I've resigned with), then all else being equal the library implementation which is easier to read would be preferred.

That said, Go being idiomatic also means generated documentation is more standardized. Java has JavaDoc, but that's not enforced or culturally as consistent as Go.

Re:Ask HN: Gmail account security by sbussard on Monday January 24, 2022 @01:52AM (#30054375)
Interesting take. It sounds like you really dislike Google. It also sounds like your manager had something to do with it. Perhaps it was a lack of promotion?

Since you’ve worked at both, do you have an opinion on why protocol buffers aren’t more widely adopted than json?

Re:Ask HN: Gmail account security by alephnan on Monday January 24, 2022 @02:31AM (#30054554)
> It sounds like you really dislike Google

Google's a great if you want a high standard of living and being pampered. Not the highest pay, but it's more relaxed.

Also if you have a PhD. Google could be a research playground for you.

Everyone at Google is or appears nice. I had a slightly mean team lead at Google once, but he's been always my favorite. Highly technical, no BS, little patience when I wasn't hyper focused. One of my coworkers at Amazon weren't nice, and just confronted me with feedback that I should show up exactly at 9A.M. I appreciate having honest and direct feedback like this, and this is where I grew the most. I don't think I ever received negative feedback at Google, even though I probably should have. Some people prefer environments where everyone is perfectly nice and happy all the time. I think I would like Google more if we didn't sugar-coat things. That would prune products and people who are deadweight, even if that possibly means me. I respect the Finance industry to the degree that they do not mask their profit motive.

> It also sounds like your manager had something to do with it.

Of course. People leave managers, not companies. That said, the managers are part of a system. I did shop around for other teams before I left, but they were all boilerplate CRUD work. CRUD work's also fine, but the value of these projects to users was not clear to me.

> Perhaps it was a lack of promotion?

I'd say that is a symptom, not the cause. It's about being appreciated and having your work understood.

> do you have an opinion on why protocol buffers aren’t more widely adopted than json?

I think some people dwell on the performance difference. I think adoption boils down to ergonomics, ease of use, and tooling. Within Google, there has been significant investment in internal tools/libraries around Protobuf especially Java. For something like Protobuf, it's not broken, why fix it? People at Google are familiar with Protobuf. The outside world is familiar with JSON. When I was at Google, I launched a gRPC/Protobuf API but our clients had significant hardship onboarding. I think this is within the theme of externalized Google tech being inferior to the internal version solely from the aspect of ease-of-use/documentation.

Until TypeScript came around, I think an argument can be made against JSON as lacking type safety. I used TypeScript when it was still in Beta and felt Google was reluctant to this. It doesn't help that TypeScript was pioneered by MicroSoft. To be fair, at the time people didn't trust Microsoft. I mean, people were trusting Chrome more than IE for good reason. Once people actually give TypeScript, I think it's a no brainer

Re:Ask HN: Gmail account security by puszczyk on Monday January 24, 2022 @03:03PM (#30063200)
Thanks for the detailed posts. This can be useful for ppl considering applying there.

I work for Elastic for the last 6y or so and I feel I’ve been lucky to have managers who cared (for customers, also for the team), provided actionable feedback, and put me in projects that lined up with my strengths and interests. I feel a lot of that is encouraged by the company culture, but esp two individuals I have in mind—I think they’d behave like that in any other company (or burn out quickly).

Would you mind sharing if this was SV or some other region? Do you know if this would a “general” culture for Google/AWS, or limited to certain teams or offices?

Re:Ask HN: Gmail account security by judge2020 on Sunday January 23, 2022 @11:22PM (#30053710)
https://issuetracker.google.com/ is supposed to be it, but if it were completely open and easy to use i'm sure they'd need a dedicated moderation team just for filtering the issues. The knowledge and dedication barrier is a frustrating but mostly effective way to weed out those with non-issues or issues that really don't affect them much (however humane you believe that is).
Re:Ask HN: Gmail account security by xg15 on Monday January 24, 2022 @01:44AM (#30054340)
I mean yeah, then they should put up a dedicated moderation team to do so. It's not like they have not enough money to do so.
Re:Ask HN: Gmail account security by onion2k on Monday January 24, 2022 @01:21AM (#30054244)
You are actually pointing out a tremendous opportunity that Google has internally and externally.

While there isn't a way to report problems, or get help with problems, and problems aren't tracked or measured, every problem is a singular example that can be hand-waved away with an "it's just that particular user being dumb".

Refusing to support customers is a choice Google has made in order to be able to ignore problems the engineers won't (or can't) solve.

Re:Ask HN: Gmail account security by logicallee on Monday January 24, 2022 @12:24AM (#30054000)
(edited)

If you don't mind sharing, what is the bug?

-

My comment originally read as follows, 2 people downvoted it.

>I work at Google and recently tried to file a bug about the calculator embedded in search. It was dastardly difficult to find how to file the ticket. It took me maybe an hour. A better system for filing tickets internally and for filing and triaging tickets from external users would be a tremendous asset for Google.

I didn't work for Google directly but I did work via another company (Tech Mahindra) so I am saying this as somewhat of an outsider compared with you.

You mention a bug about the calculator embedded in search: could you give me the details, and I can try to get it solved via my Google contacts.

For context, in my personal experience as a user and engineer, the Google embedded calculator is the best product among all of Google's many offerings and works flawlessly for all inputs. I find it breathtaking. For example, here is how many feet times pounds you can turn 3000 Calories into:

https://ibb.co/qJ0Qz0L

it worked on my first attempt. What does this mean? Well here's a foot-pound: https://ibb.co/N3WCxYV

If you weigh 180 pounds you're not climbing Mt. Everest twice (29,032′) without burning 3000 Calories. (Even at 100% efficiency).

Try getting a result like that from any other calculator (though Wolfram Alpha gets close).

What's the bug you tried to report? (What did you enter, what is the correct output and why is it correct, and what is the returned output and why is it incorrect?)

I've never seen it make a mistake so far, and I use it heavily for all sorts of things. (Sometimes I force Google to show me the calculator by typing = at the end of my Google query.) Since the product works so well for me personally, I'd love to understand what problem you have with it.

Re:Ask HN: Gmail account security by WithinReason on Monday January 24, 2022 @04:47AM (#30055370)
You just found a bug in Google Calculator. You wrote "calories" but Google is giving you the answer in "kilocalories". If you change "calories" to "kilocalories" the answer doesn't change.

I wonder how many times in the past has it given you the wrong answer without you noticing?

Re:Ask HN: Gmail account security by logicallee on Monday January 24, 2022 @07:19PM (#30066120)
I agree with the other person who replied to you. By 3000 calories I meant 3000 Calories, which is how people use it. My input is sloppy, Google turns its output into something rigorous.

As the other person replied, it is labelled precisely.

Re:Ask HN: Gmail account security by Dylan16807 on Monday January 24, 2022 @05:34AM (#30055806)
That's what people mean by calories, it's not a bug. It even labels it precisely!
Re:Ask HN: Gmail account security by logicallee on Monday January 24, 2022 @07:19PM (#30066124)
Yes, I agree.
Re:Ask HN: Gmail account security by ejolto on Tuesday January 25, 2022 @09:41AM (#30072254)
I tired 1000 millicalories, but doesn't look like Google understands that either.
Re:Ask HN: Gmail account security by KennyBlanken on Monday January 24, 2022 @06:46PM (#30065823)
> A better system for filing tickets internally and for filing and triaging tickets from external users would be a tremendous asset for Google.

The problem is not that they don't have a tool; they could easily build one almost overnight. They have a glut of very competent technical labor, lots of capital, infrastructure up the ass.

They don't care.

The tech people are convinced they're geniuses who build stuff that never breaks.

The business people think they've figured out every problem a user could have and are satisfied that the documentation and snippets of help text are sufficient.

The accountants say "it would cost us more to create such a system and staff it than we would lose in business from not addressing it."

Re:Ask HN: Gmail account security by mattnewton on Sunday January 23, 2022 @11:59PM (#30053893)
If it's about search, you could always use go/bad I think?
Re:Ask HN: Gmail account security by igetspam on Sunday January 23, 2022 @11:33PM (#30053780)
Did GUTS not survive? When I left, it was pretty solid. Some very close friends of mine spent years on that system. Haven't thought about it in a while but it was so simple and easy. Then again, that was a decade ago.
Re:Ask HN: Gmail account security by mike_d on Monday January 24, 2022 @12:31AM (#30054038)
GUTS is still used for things like desk moves, but buganizer is where eng tickets live. (at least when I left a few years ago)
Re:Ask HN: Gmail account security by joshuamorton on Monday January 24, 2022 @12:48AM (#30054116)
The discoverability may not be the best, but its not terrible. There's a "Send Feedback" button on most search result pages (and specific ones per-result if you click the 3-dot menus). The same "Send Feedback" thing is available in Gmail (though its hidden in a (?) menu), Youtube etc.

IME that feedback is generally taken seriously.

Re:Ask HN: Gmail account security by jakub_g on Monday January 24, 2022 @03:41AM (#30054934)
Maybe they don't want you to file the bug too easily?

I imagine Google would getting 10,000s bugs per day if it was too easy.

Re:Ask HN: Gmail account security by DocTomoe on Monday January 24, 2022 @06:36AM (#30056304)
I'd rather know where my ship is burning instead of closing my eyes and just having happy thoughts.

But then, I am an engineer, not some marketing drone...

Re:Ask HN: Gmail account security by llampx on Monday January 24, 2022 @08:05AM (#30057082)
Rest assured that they fix their AdSense and AdWords bugs very very fast.
Re:Ask HN: Gmail account security by bosie on Monday January 24, 2022 @10:43AM (#30059010)
Curious but how would you figure out where the ship is burning if you are receiving a larger number of bug reports, e.g. 1 million bug reports per month?

Loads of duplication will also follow etc. Sounds like you need entire teams to figure out what the real bugs are at that point and maintain the bug list? Though I can't think of a workflow from the top of my head.

Re:Ask HN: Gmail account security by DocTomoe on Monday January 24, 2022 @04:04PM (#30064013)
This very much is a solved problem - it comes down to standardization in tools, categorization of incidents, keyword analysis of incident description, and (probably automatable) correlation with logfiles and identifiers. Preventive maintenance is not a concept that has been around only recently, and a good QA team has a whole toolkit of things to throw at code before it hits the customer. And yes, ultimately, it is a question on whether you invest the resources to deal with the dumpster fire, or just let it burn to ashes. I am also a big believer in "You build it, you run it", and a "no new features as long as there are open bug tickets" approaches, making teams responsible for their own technical debt.

Google with it's "Let's never maintain our products, let the bitrot make them gradually worse and eventually EOL them" approach seems to prefer to avoid that kind of cost.

I used to be a Google fanboy in the early 2000s. Maybe it's coming with age, but these days I prefer boring tech that works well as compared than half-baked moonshots, and Google may have burned me once too many. Other software megacorps (and even some NGOs) do this better than the big G.

Re:Ask HN: Gmail account security by joering2 on Monday January 24, 2022 @12:29AM (#30054025)
> "If you're not paying for it, you're the product."

Xoogler here - actually we used to say "if you are not buying advertising from us, Google can't help you at all".

And just recently I am great example of that. I used to have a Gsuite account at $6/per month for 3 years, then decided to give up on it b/c I wasn't using it. But unfortunately the domain expired before I could properly disconnect it and cancel my account. You can probably already imagine at this point what kind of hell I went thru with "google help". Ultimately I had someone from India called me 3 times to explain - the questionnaire they sent me has to be answer in specific format: each question has to have one paragraph space, then tab (9), then my answer. I kid you not! I spent 3 weeks, been transferred over email ticket about 10 times and every time they told me the same thing. Even if I did exactly how they want it - I guess email was automatically eating up the tabulate key and replacing it with spaces. Eventually a buddy of mine who still works there (different dept) told me customer support forwards your email to some account that parses message automatically, and they cannot even change one single letter in your message. Even when explaining them on the phone that I am following up with their stupid protocol of one new line, then tab, then my answer, then next line must be second question, their program must be messing it up.

Eventually I gave up on their customer support. It took me/them six months of chargeback disputes for $6 each month until my account must have popped out on someones screen and Google employee gave me 3.5 seconds of their time to click "close this account".

Re:Ask HN: Gmail account security by bamboozled on Monday January 24, 2022 @05:21AM (#30055674)
Once we were having trouble with GKE hosted in Asia, it was causing out business a major outage and it wasn't something which I had the power to fix, from memory, half way through a cluster upgrade, Google ran out of compute so the upgrade was stuck half and the control plane ended up in a bad state and some how this impacted the networking (it shouldn't but it happened). I was unable to provision a new cluster due to the lack of capacity so we were stuck.

This wasn't the first problem we'd had either.

There was absolutely no one to call, no one to even alert to warn other customers, the status pages were all green.

Instead of bothering with Google, I just opened an account on AWS and migrated whole stack to AWS in ~ 3 hours, pointed DNS at the new load balancers and we never went back and continued doing business without issue for as long as I can remember.

Re:Ask HN: Gmail account security by evercast on Monday January 24, 2022 @06:10AM (#30056103)
I'm certainly far from finding excuses for Google, but I have strong doubts when reading stories like this. I wonder how is this possible? If you check their support packages at https://cloud.google.com/support/, they provide different options based on how much you are willing to pay. The premium package gives you 15 minute response time and a personal TAM. What am I missing here? They promise a service, but it doesn't work?

AWS seems to also have support packages: https://aws.amazon.com/premiumsupport/plans/, and their response times are also not supposed to be instant.

Re:Ask HN: Gmail account security by bamboozled on Monday January 24, 2022 @09:06AM (#30057662)
Have you ever tried to get one of those packages ? You need to have an interview etc.It’s not straight forward or cheap. We tried to sign up and have a TAM assigned but gave up. It was a lot of effort.

Amazon gives great support at an affordable price.

Re:Ask HN: Gmail account security by ulrikrasmussen on Monday January 24, 2022 @02:46AM (#30054630)
It's pretty crazy to think about the fact that your email is de-facto your online identity, as it is the universal second factor that is used as a fallback if other login mechanisms fail. An email service is two things: a global name [email protected], which is really your online identity, and an email service that hosts the SMTP, IMAP and DNS services required for the identity to function. People are willing to hand over not just the ownership of the service but also their global digital identity (the email address) to a third-party which now assumes total control of it, and which does not have any interest in supporting you. It is a major hassle to move to another provider, even a paid one, because your email address is tied to the service provider.

Because email addresses are practically a requirement to function in society, I think they should be a public service. Everyone should have the right to get an email address controlled by a public service institution which guarantees you that you can move between service providers as you please. There could even be a standardized protocol that service providers could use to easily update DNS entries when the user requests a move, assuming that you can identify yourself via some other means.

Re:Ask HN: Gmail account security by Gareth321 on Monday January 24, 2022 @03:25AM (#30054833)
I fully agree. Over the years I've been reading about people being locked out of their Gmail accounts, and the YEARS of pain they had to go through to try to regain access to the countless connected services. You don't realise how many hundreds of services require access to your email account until you lose access. The final straw was reading the heartbreaking account of someone who lost decades worth of personal pictures, critical emails, and access to everything that mattered to him. Google's response was worse than "get lost."

So I bought my own domain and have spent the last year slowly migrating everything over. I'm still only ~30% of the way there. My whole life was centered around that Gmail address, and I could have lost it in an instant for any and no reason at all. It's horrifying, and happens to perhaps thousands of people every day. As we continue to SaaSify everything this problem is going to come to the fore sooner rather than later. Our entire lives live in the cloud now and it can be deleted without cause or notice.

At the very least I would like to see governments issue people a free state email address which can be hosted anywhere. Email is now a necessity.

Re:Ask HN: Gmail account security by toastal on Monday January 24, 2022 @04:52AM (#30055411)
Keep it up though. And encourage a friend.
Re:Ask HN: Gmail account security by ihateolives on Monday January 24, 2022 @05:30AM (#30055764)
> Because email addresses are practically a requirement to function in society, I think they should be a public service. Everyone should have the right to get an email address controlled by a public service institution which guarantees you that you can move between service providers as you please.

In some countries it has already been for a long time, for example Estonia gives everyone by default an email address that is tied to their national ID and you can forward mail from that address to any provider you want.

Edit: Anybody barely uses it though because usually there is no need. But it's there in case you want to use it.

Re:Ask HN: Gmail account security by scionthefly on Monday January 24, 2022 @12:12PM (#30060583)
In the US, I have long thought the USPS missed several good opportunities to get involved in the internet revolution in the 90s. This is a major one.
Re:Ask HN: Gmail account security by creato on Monday January 24, 2022 @03:13AM (#30054779)
The service you propose will either have the same problem as google, be vulnerable to social engineering attacks (like phone number providers), or be tied to extremely expensive infrastructure (e.g. enable post office or DMV offices to validate identity for the purposes of managing access to this account).

Even if google had customer support agents, what do you want them to do in cases like this? They can't actually validate anyone as the owner of an account, they'd simply be the targets of people begging to access accounts.

Edit: the implication being, we probably simply need most people to just not depend on email for anything important. Unless you can maintain multiple 2FA methods, your email account isn't reliable enough to be trusted with important things.

Re:Ask HN: Gmail account security by ulrikrasmussen on Monday January 24, 2022 @04:50AM (#30055395)
In my country (Denmark) every person and legal entity has a government-issued digital identity (NemID) so the authentication process is trivial and cheap.
Re:Ask HN: Gmail account security by mavhc on Monday January 24, 2022 @08:31AM (#30057341)
Did they fix the security flaws mentioned on https://en.wikipedia.org/wiki/NemID yet?
Re:Ask HN: Gmail account security by ulrikrasmussen on Monday January 24, 2022 @01:37PM (#30061890)
The provider of the system is being replaced, which means that NemID will be replaced with MitID. This solves some security issues, but brings others. Most importantly, MitID, unlike NemID, does not allow the service provider to embed the login form, but always sends you to the identity provider to log in. On the other hand, you no longer need to input both a password and use a second factor (key card, code generator or phone app). In MitID, it is enough to enter your username and approve in the phone app. This is quite bad, and has led to the comical recommendation that you should pick a username that is hard to guess. Comical because the main argument for not requiring a password is to make the system easier to use, because passwords are hard to remember.
Re:Ask HN: Gmail account security by mavhc on Monday January 24, 2022 @02:02PM (#30062269)
Probably need to call the Estonians
Re:Ask HN: Gmail account security by throwawayvibes on Tuesday January 25, 2022 @06:18AM (#30070579)
Same in the Netherlands with DigiD. The name is an awful pun. Very Dutch.
Re:Ask HN: Gmail account security by bloak on Monday January 24, 2022 @04:29AM (#30055243)
Yes, it would be "tied to extremely expensive infrastructure" ... that already exists. So no additional cost.
Re:Ask HN: Gmail account security by kodemager on Monday January 24, 2022 @02:05AM (#30054443)
You’d wonder why they have corporate sales. I’ve worked in enterprise for a long time and we’d laugh at the notion whenever someone suggested we buy any Google service because easy access to phone support when things go wrong is one of the key selling points in enterprise.

It’s why Microsoft has done so well for itself in this area over the decades. Sure Office helps, but the fact that your operations guys can be on the phone with their Seattle based offices, and get hourly updates where Microsoft calls you, when something big goes wrong is pure gold to any IT manager in any enterprise. Not only because it lets you solve issues faster, but also because you can tell the organisation that IT is on the phone with Microsoft’s head offices and you are working on a solution with them.

Re:Ask HN: Gmail account security by bryanrasmussen on Monday January 24, 2022 @01:16AM (#30054216)
>about how he paid Google something for some service

>I'd frequently tell my co-workers, "If you're not paying for it, you're the product."

it seems even if he did pay he was the product, which frankly jibes with my experience of paying for things at Google.

Re:Ask HN: Gmail account security by durnygbur on Monday January 24, 2022 @05:48AM (#30055916)
If you pay for it, you simply like it like this.
Re:Ask HN: Gmail account security by bryanrasmussen on Monday January 24, 2022 @06:32AM (#30056269)
As a normal rule I don't know what customer service is like at a company I'm paying for things at, until I have something go wrong and I realize it sucks.
Re:Ask HN: Gmail account security by RubyRidgeRandy on Sunday January 23, 2022 @11:05PM (#30053620)
only tangentially related but that phrase is a pet peeve of mine. You are always the product if you are using software - free or paid. Netflix is sure as hell going to use your data the same way youtube would.

The only exception of course is most but not all FOSS.

Re:Ask HN: Gmail account security by davidgh on Sunday January 23, 2022 @11:24PM (#30053725)
I think there’s a difference. “You are the product” means that your usage and data are the primary thing the company develops (with software) so it can be sold to their actual customers, namely, advertisers.

I’ve been involved with many software companies that gather various metrics (analytics, crash logs, user info, etc.) but do not sell that data to anyone. As such, the user is not “the product” but the customer. I think there’s a meaningful difference here.

Re:Ask HN: Gmail account security by zo1 on Monday January 24, 2022 @12:48AM (#30054115)
In those cases the user is an asset for the company. And not "asset" in a good way if you ask me. It's more of an resource than anything noble.
Re:Ask HN: Gmail account security by vgb2k18 on Monday January 24, 2022 @12:42AM (#30054091)
Since it's a pet peeve we share I'll add... I feel it's a bi-directional exchange. A trade. I consume a product (Gmail) and they consume a product (my personal information). At best I'd be "a" product not exclusively "the" product.
Re:Ask HN: Gmail account security by chaxor on Monday January 24, 2022 @01:04AM (#30054180)
Self hosted is the only good future
Re:Ask HN: Gmail account security by BigRedDog1669 on Thursday January 27, 2022 @03:59PM (#30106582)
I kind of agree and would like to try selfhosting stuff for myself, but in the future where should the self hosting lie? Not everyone can self host (your mother, cousin, etc, people with disabilities, etc) So if it is the future, would level of society would host it reliably? Family, government, etc. Everything seems problematic either in terms of practicality and security.
Re:Ask HN: Gmail account security by bscphil on Monday January 24, 2022 @01:18AM (#30054222)
Is that true for Apple?
Re:Ask HN: Gmail account security by AnthonyMouse on Monday January 24, 2022 @01:29AM (#30054276)
You are the product Apple sells to app developers for 30% of their income. Notice that you are not allowed to do things that interfere with this.
Re:Ask HN: Gmail account security by bscphil on Monday January 24, 2022 @04:24AM (#30055209)
That's not at all the same thing as the person I was replying to was claiming, though.
Re:Ask HN: Gmail account security by AnthonyMouse on Monday January 24, 2022 @12:53PM (#30061216)
One of the biggest problems with surveillance capitalism is how it subtly guides you to the thing the corporation wants by manipulating search ranking or using ML to influence human behavior.

With Apple there is no subtlety because you just can't have what they don't want you to. Apple wants to have a deal with Hollywood so no iOS BitTorrent clients for you. You don't even know that the things you're being deprived of would have been available -- it's the same problem. It's worse. At least with Google if you notice they're removing things you want to see from search results you can switch to another search engine and still use Android. If you want video game ROMs on your iOS device you have to throw it away and buy something else.

And the privacy thing feels like a Trojan horse when they still have all your data on iCloud and have root on your device. Supposedly they don't do anything with it now (except allow iCloud to be subpoenaed by law enforcement without a warrant), and I tend to believe them.

Now suppose we finally get a free hardware phone that isn't a dog. It runs an Android fork with all the privacy invasive stuff stripped out but can still run Android apps and gets OS updates for 10+ years (i.e. indefinitely) because the drivers are in the kernel tree. That would eat a big chunk of Apple's market -- the people who don't want the central control but do want the privacy are going over there. Or just pick whatever scenario you like where Apple's business starts shrinking rather than growing. Nothing lasts forever.

Their executives are under pressure to keep profits up and they have an enormous trove of everyone's data they weren't previously monetizing. Desperate companies do desperate things. Or get acquired by Oracle or AT&T or Huawei.

Since that can happen with non-trivial probability at some future date, you can't put anything on your iPhone you're not willing to have that happen to. And then how is that any better than the alternative? It's even worse if you don't expect it to happen and then it does.

[dead]
Re:Ask HN: Gmail account security by webXL on Sunday January 23, 2022 @11:37PM (#30053800)
Looking at Apple's latest hardware changes, I think users are once again the customers.
Re:Ask HN: Gmail account security by martyvis on Sunday January 23, 2022 @11:35PM (#30053792)
I've subscribed to Google One for a few years. (When I say "pay", I'm using credit from answering surveys from Google a few times a week). It's only a couple of dollars a month, it gives you more online cloud storage, but it also gives you a chat and call service to Google. I have used it a couple of times - once to help me push LG to release updates on a phone (they kept saying it was Google's responsibility), another to one get my wife properly added to be able to use the Home smart speaker. Both times chat was followed up a call to a real person (that was understandable, and willing to chase up and respond to the issue). I feel if I had an account issue it would similarly work out.
Re:Ask HN: Gmail account security by judge2020 on Sunday January 23, 2022 @11:45PM (#30053838)
I think the issue is that the form is indeed locked behind being logged in[0], so the phone support won't work for login issues when you have no other device logged in.

0: https://support.google.com/googleone/contact/googleone_c2c?h...

Re:Ask HN: Gmail account security by technofiend on Monday January 24, 2022 @01:35AM (#30054299)
I'm trying to use Google One now to fix an issue and it's been a struggle. Hopefully they'll eventually work it out but frankly without G1 I would probably just throw my Nest cameras out and dispute all future nest charges. Google really need to work on customer service if they're going to offer services that need it.
Re:Ask HN: Gmail account security by 1vuio0pswjnm7 on Monday January 24, 2022 @01:30AM (#30054281)
"I'd frequently tell my co-workers, "If you're not paying for it, you're the product.""

But it sounds like this "extremely irate user" was paying for it.

Re:Ask HN: Gmail account security by steelframe on Monday January 24, 2022 @02:52PM (#30063022)
Yeah, fair point. It's been several years, so maybe my memory of all the details is a bit hazy by now. I just recall that at one point one of the salespeople was addressing a point about something or other involving the user having paid for something. I have no idea whether the user was telling the complete truth (were they referring to something they used to subscribe to and don't any more?) or whether at the time whatever they had paid Google for would have entitled the user to phone support for GMail account access issues. Whatever was going on, the user wasn't able to find any avenues to get the support they needed for their issue.

Regardless I agree with other comments to the effect that even if you are paying, you are often still the product!

Re:Ask HN: Gmail account security by 1vuio0pswjnm7 on Monday January 24, 2022 @04:06PM (#30064032)
"Regardless I agree with other comments to the effect that even if you are paying, you are often still the product!"

The anaylsis needs to go further than whether one is paying or not. IMHO.

It is not rare to see HN commenters who appear to believe that the act of paying some "user fee" to a "tech" company that willfully caters to advertising, devotes almost all of its resources toward catering to advertisers, and derives almost all its revenue from advertising services, is somehow meaningful.

Re:Ask HN: Gmail account security by eschulz on Sunday January 23, 2022 @10:58PM (#30053580)
Was the screaming guy no paying for some service?
Re:Ask HN: Gmail account security by aesyondu on Monday January 24, 2022 @01:24AM (#30054261)
I'm a bit confused as well.

> he paid Google something for some service and was entitled to phone support and he demanded someone help him

This does not support the conclusion about free users being the product, since the customer was paying based on the statement above.

Re:Ask HN: Gmail account security by ngold on Sunday January 23, 2022 @11:55PM (#30053875)
Disclaimer. I'm a new Google play thing, by giving them money. Just registered a website through them and am about to release a game on the playstore. Fully dependant on zero custom service now.

The one thing I've never understood about google. Some sort of law for a trillion dollar company to have customer service or something.

Google should be employing 10's of thousands of customer service employees to take calls to troubleshoot their customers issues.

On a side note.

Here is my.... the simplest website you have seen since 1989.

https://simplegametime.com

I'm not running a user data farm. I just want to make stupid games, like...

P.S. Zero advertising for anything including my game. Just a 7 line privacy policy. Don't need much more.

Re:Ask HN: Gmail account security by rzz3 on Monday January 24, 2022 @12:01AM (#30053902)
More laws aren’t always the answer. Really, we should just be using a company that gives a shit about its users.
Re:Ask HN: Gmail account security by Gigachad on Monday January 24, 2022 @12:31AM (#30054037)
Problem is it all works just fine until you get locked out and have no options. So the market won't ever gradually move over because its only a very small % who get hit with an awful experience while everyone else is perfectly fine.
Re:Ask HN: Gmail account security by ngold on Monday January 24, 2022 @04:26AM (#30055219)
And now I'm signed up to the system. It's terrifying.

At any point. You're done.

Hence the nothing clause.

I'm sure any game I submit to the play will be wrapped in googs analytics.

No matter what my privacy police says.

Re:Ask HN: Gmail account security by foxfluff on Monday January 24, 2022 @05:16AM (#30055633)
I don't think people are informed well enough to know which company gives a shit about its users. Google had pretty good reputation when I started first using GMail via an invite during the beta.

I agree more laws aren't always the answer but I really do think that companies should take some responsibility as far as customers' data and property is concerned. If I take my car to be serviced, they can't just tow it to a junkyard and tell me to fuck off. Even if they advertised free service. If you can't provide a free service and take responsibility for it, then don't.

IMO, if the service includes "borrowing" property (rent, email server), then they can't just cut the customer off without giving them time and the means to move off. (It would be illegal here for my landlord to step in and lock me out tomorrow)

Re:Ask HN: Gmail account security by xg15 on Monday January 24, 2022 @01:47AM (#30054354)
Because that worked so well in the past. There is no "we" - they wouldn't have become a billion dollar company if they hadn't found ways to make people still use them despite those issues.

But that doesn't mean they aren't issues.

Re:Ask HN: Gmail account security by ngold on Monday January 24, 2022 @12:14AM (#30053961)
True.

The sheer scale of not giving a crap is what is truly impressive. Alphabet has built a monster system meant solely to not have a phone number. That's a scary innovation.

Re:Ask HN: Gmail account security by mission_failed on Monday January 24, 2022 @02:23AM (#30054521)
I'd suggest you at the very least transfer the domain to a separate company. If Google mysteriously decides to screw you around it will be impossible to access or transfer your domain.
Re:Ask HN: Gmail account security by minusSeven on Monday January 24, 2022 @05:32AM (#30055780)
>I'd frequently tell my co-workers, "If you're not paying for it, you're the product." That experience underscored that notion for me.

But this isn't true for all of us, google provides support through paid programs and sells services to other businesses. This is more of google specific problem.

Re:Ask HN: Gmail account security by vbezhenar on Monday January 24, 2022 @01:21AM (#30054247)
I submitted security bug to Chrome. It was not very serious or urgent. Somebody looked at it in the first hour, in the first day it was analyzed and in the first week it was resolved. I was kind of surprised, because I was sure that public feedback from nobody is going to be put in a very long queue.
Re:Ask HN: Gmail account security by neycoda on Monday January 24, 2022 @09:05AM (#30057655)
Google makes money on Gmail. That means they can pay for customer support.
Re:Ask HN: Gmail account security by hericium on Monday January 24, 2022 @01:40AM (#30054324)
> Google office there. The Googlers sitting around

Seriously? You stated that you left the cult.