News for hackers. Stuff that matters.
Re:Gmail 2FA causes the homeless to permanently lose access ... by tsimionescu on Friday October 07, 2022 @11:46AM (#33122897)
> I don't find it paternalistic. The goal is to cut down on support costs by reducing the number of users who get hacked and need assistance regaining access to their accounts, and to force users to have a method of demonstrating they own the account even if they can't log in. That it confers some additional security to users is nice, but not really the end goal.

So we should be mindful of Google's profit margins, instead of homeless people's access to vital services?

Re:Gmail 2FA causes the homeless to permanently lose access ... by asdfasgasdgasdg on Friday October 07, 2022 @12:00PM (#33123112)
If the service is truly vital it should be provided by the government, not Google. The government would also be free to set security policies and provide support at the level and cost demanded by the public. It is not and should not be the role of a private enterprise to act as a backstop for the fabric of society when it is not in their interests or their customers' overall interests.
Re:Gmail 2FA causes the homeless to permanently lose access ... by tsimionescu on Friday October 07, 2022 @01:33PM (#33124457)
The vital services are provided by the government, but require an email address. Some people have trusted Google to be their email provider, and Google is failing some of those people by denying them access unnecessarily.
Re:Gmail 2FA causes the homeless to permanently lose access ... by 8note on Friday October 07, 2022 @01:55PM (#33124743)
If vital services rely on email, email is a vital service
Re:Gmail 2FA causes the homeless to permanently lose access ... by asdfasgasdgasdg on Friday October 07, 2022 @02:18PM (#33125035)
I'm saying that if the public/government doesn't feel like Google's security policies are compatible with the homeless, the simplest solution is to set up a government-run email host.
Re:Gmail 2FA causes the homeless to permanently lose access ... by tsimionescu on Saturday October 08, 2022 @02:36AM (#33130294)
Sure, the government should.

But we should also expect Google to give a small crap about the troubles it's putting some of its users through, especially when this is so important to some of its most vulnerable users, and adding an option to disable 2FA is such a small feature for a Mega corporation.

Re:Gmail 2FA causes the homeless to permanently lose access ... by paintman252 on Friday October 07, 2022 @03:44PM (#33126026)
umm you DO know that Gmail isn't only free email, right? Like, just use another one which doesn't force 2FA. Why is this become an issue? I don't get it
Re:Gmail 2FA causes the homeless to permanently lose access ... by themitigating on Friday October 07, 2022 @12:11PM (#33123256)
It's security vs homeless access to vital services. I think it's a diffiult line to draw
Re:Gmail 2FA causes the homeless to permanently lose access ... by Wowfunhappy on Friday October 07, 2022 @12:21PM (#33123394)
I don't think it's difficult!

• The people who want security get to keep all the security they get today.

• The people who don't think about security and leave default settings intact keep all the security they get today.

• The people who explicitly ask for less security get less security.

• Some of the homeless will get increased access to vital services.

It's a win-win—unless you believe, for some reason, that people should have security forced on them even if they explicitly ask to not have it. I fundamentally don't understand this mindset. People should have the right to do dangerous things if they are warned of the risks involved.

Re:Gmail 2FA causes the homeless to permanently lose access ... by Karunamon on Friday October 07, 2022 @01:40PM (#33124549)
>The people who explicitly ask for less security get less security.

The problem with that is less security is almost always more usable than more security, which leads to the greater amount of people being in that state, which is not just a danger to the user making the choice, it is a danger to others.

Re:Gmail 2FA causes the homeless to permanently lose access ... by 1MachineElf on Friday October 07, 2022 @02:58PM (#33125483)
Not sure why this is being downvited. You could argue that forcing security upon users is why everyone knows about password-based logon today. Same could be said about the initiative for HTTPS everywhere.
Re:Gmail 2FA causes the homeless to permanently lose access ... by tsimionescu on Saturday October 08, 2022 @02:41AM (#33130314)
Unless the requirement is extremely onerous, very few people will go into settings to check if it can be circumvented. For homeless people, it seems that it is indeed extremely onerous, so they or those who help them will have a reason to do this, but few others.
Re:Gmail 2FA causes the homeless to permanently lose access ... by slavik81 on Friday October 07, 2022 @12:22PM (#33123422)
Keeping wrong people out is only half of what is required for security. You also have to let the right people in.
Re:Gmail 2FA causes the homeless to permanently lose access ... by lancesells on Friday October 07, 2022 @01:17PM (#33124246)
Is Google a vital service or is email a vital service?
Re:Gmail 2FA causes the homeless to permanently lose access ... by tsimionescu on Friday October 07, 2022 @01:34PM (#33124474)
Neither. Gmail is an email provider which has provided access to an account that these people have registered with providers of vital services.
Re:Gmail 2FA causes the homeless to permanently lose access ... by paintman252 on Friday October 07, 2022 @03:46PM (#33126045)
And? Not every service is homeless-friendly. That's fine. There are literally hundreds of free email services.
Re:Gmail 2FA causes the homeless to permanently lose access ... by tsimionescu on Saturday October 08, 2022 @02:39AM (#33130305)
Why is it fine? Why should we not ask and expect that one of the largest corporations on the planet make a tiny effort to improve the lives of some of its users at very little cost to them?

Sure, homeless people and those who help them should pick an alternate free email service. And the government should either set up its own email or stop requiring email contact for this sort of thing. But for people who are already Google users, Google should also try to make their lives significantly easier with a tiny bit of effort (allow someone to explicitly disable 2FA for gmail - with all the warnings and cautions that they can).

Re:Gmail 2FA causes the homeless to permanently lose access ... by parineum on Friday October 07, 2022 @02:33PM (#33125208)
We should probably not force private companies to spend (or lose, no difference) money to solve societal problems that they are in no way responsible for.

That's like forcing pepboys to change the tires of senior citizens for free because social security isn't paying enough.

Maybe we should put our efforts towards fixing problems instead of asking private companies to put a bandaid on it at their expense.