3 ms·

"Only you can see this data" Side-stepping for a minute that Google and governments can also see this data, this sort of wholesale data aggregation and present

"Only you can see this data" Side-stepping for a minute that Google and governments can also see this data, this sort of wholesale data aggregation and presentation seriously ups the ante for account security. Getting somebody's Google account from third-party breach-de-jour used to mean you got their email history, or could pretend to be them... But with this you have their browsing, app, search and location history. That is to say, you can discover: What they're doing. Where they're doing it. What they're thinking about (I search everything). Who they interact with. Worse, I wasn't prompted for any sort of password. Physical access to my computer (and I assume phone) now gives easy access historical surveillance data. Welcome to the new generation of identity theft.

rkangel 10y ago
I noted that even though I was already logged in, it still asked me for my password (and then 2FA token). That is one step at least.
- pinum 10y ago
  It asked for my password but not my 2FA. Strange. (I also had no results, though, because I've turned everything off.)
ubercore 10y ago
It also helps one keep tabs on activity in their account, so compromises will be more apparent. I had my phone stolen recently, and use this and android device manager to make sure nobody is in my google account (it was encrypted with a fingerprint, but you never know...). I've been very impressed with their smarts about security, they seem to tow a fine line between security and convenience. Any sensitive account information like this will usually trigger a new password entry (unless you've entered it recently), or 2fa.
che_shirecat 10y ago
The scary thing about Google and other tech juggernauts is the single point of failure that represent for the security of one's identity. Integrating all of the tech services a person would use (social media SSO, acquisitions/mergers of smaller tech service companies) is great for convenience, but the compromising of a single account is now an event that can't just be shrugged off anymore. People now exist more and more online, and there hasn't been a parallel increase in the amount of thought put into dealing with the consequences of this shift.
dredmorbius 10y ago
Data are liability. https://duckduckgo.com/?q=%22data+are+liability%22&t=ftas&ia=web https://duckduckgo.com/?q=%22data+are+liability%22&t=ftas&ia... https://encrypted.google.com/search?hl=en&q=%22data%20are%20liability%22 https://encrypted.google.com/search?hl=en&q=%22data%20are%20... https://www.reddit.com/r/dredmorbius/comments/3hn4r5/on_the_media_asks_what_can_we_learn_from_ashley/ https://www.reddit.com/r/dredmorbius/comments/3hn4r5/on_the_...
codingdave 10y ago
It must depend on your privacy settings. I was prompted for a password, and then all it had to show was a handful of youtube videos I've watched over the past few years.
- stephenboyd 10y ago
  Same here. This just reflected to me that I seem to have locked down my 'privacy' controls better than I thought. YouTube is the only Google service using my recorded activity for ads or recommendations, but I actually like the recommendations.

rkangel 10y ago

I noted that even though I was already logged in, it still asked me for my password (and then 2FA token). That is one step at least.

pinum 10y ago
It asked for my password but not my 2FA. Strange. (I also had no results, though, because I've turned everything off.)

ubercore 10y ago

It also helps one keep tabs on activity in their account, so compromises will be more apparent. I had my phone stolen recently, and use this and android device manager to make sure nobody is in my google account (it was encrypted with a fingerprint, but you never know...). I've been very impressed with their smarts about security, they seem to tow a fine line between security and convenience. Any sensitive account information like this will usually trigger a new password entry (unless you've entered it recently), or 2fa.

che_shirecat 10y ago

The scary thing about Google and other tech juggernauts is the single point of failure that represent for the security of one's identity. Integrating all of the tech services a person would use (social media SSO, acquisitions/mergers of smaller tech service companies) is great for convenience, but the compromising of a single account is now an event that can't just be shrugged off anymore. People now exist more and more online, and there hasn't been a parallel increase in the amount of thought put into dealing with the consequences of this shift.

dredmorbius 10y ago

Data are liability. https://duckduckgo.com/?q=%22data+are+liability%22&t=ftas&ia=web https://duckduckgo.com/?q=%22data+are+liability%22&t=ftas&ia... https://encrypted.google.com/search?hl=en&q=%22data%20are%20liability%22 https://encrypted.google.com/search?hl=en&q=%22data%20are%20... https://www.reddit.com/r/dredmorbius/comments/3hn4r5/on_the_media_asks_what_can_we_learn_from_ashley/ https://www.reddit.com/r/dredmorbius/comments/3hn4r5/on_the_...

codingdave 10y ago

It must depend on your privacy settings. I was prompted for a password, and then all it had to show was a handful of youtube videos I've watched over the past few years.

stephenboyd 10y ago
Same here. This just reflected to me that I seem to have locked down my 'privacy' controls better than I thought. YouTube is the only Google service using my recorded activity for ads or recommendations, but I actually like the recommendations.