18 ms·
Ask HN: Should we own the free stuff we pay for?
Last week I received a spam email from ~generic dumb scammer #199209842982~ here it is for your amusement: https://imgur.com/YYqOgYE https://imgur.com/YYqOgYE
I've blurred the sender because it might have been a hijacked account, and it's not like it's hard to get a new gmail account anyways. You can also see that I've blurred all the other people too. Yeah, the scammer cc all his targets.
I was in a good mood, so I replied and made fun of him and warned all the other recipients that, "hey, just in case you're distracted, yes this is a spam email". I didn't use any curse words, or strong language, but I was a bit edgy.
Two days later, my google account was suspended. Apparently, my account was being used to send unwanted e-mails. Ha! I just became a spammer.
And let me tell you, it was very frustrating to be blacklisted like this. A little context for you, I'm a DevOps engineer and I've been using gmail for the past 15 years. I'll skip the classic 'my files, my contacts, my email' because I had backups.
But I lost access to paid services that I had set up with social login, besides all Google's services ( GCP, firebase, youtube premium, google one, subscriptions paid through play store, google ads, etc, etc). And here's the kicker: my gmail used to be the contact I shared with potential clients, current clients, and job applications which, by the way, I was actively job seeking. Not because I don't like my job, but because I had pushback on my raise on a recent promotion, so I was trying to get offers to make a point.
But what if I was out of a job? What if I was expecting a contract to sign? What if I had an SLA with a client? What if my bank or the government, health plan, car insurance, or any of the hundreds of notifications that I've set up throughout the years was triggered and needed my attention?
I know about terms of services, that they're a company and they can do whatever they want. But what if your car maker could take away your car if you turned right without signing first? Or if you went over the speed limit? What if you were a salesman and samsung could take away your phone because you're using it to call people to do your job and they've reported you for unwanted calls? Or AT&T could take away your phone number because you said a curse word on the phone?
You could argue that gmail is not a product that I own, but I paid for it, so technically, don't I own it? Don't I get the right to use it while they figure out if I'm really a spammer or not?
That got me thinking, what is an identity? How can I prove that I am who I am? I thought I could just share my profile, or gmail, or phone number, or identity and prove that I was who I was. But all those things can be taken away because of some rule that can be judged and enforced by someone else.
The google stack is very convenient, and it's 2022, I'm not going to start hosting my email server, but I'm in need of a foolproof and long lasting solution to online identity. And I've started by purchasing a domain name for 10 years and having a 'catch all and forward to gmail' rule setup. So I can just forward it all to somewhere else in case I lose my gmail again.
But what if I get reported on my domain name? What if that gets suspended or blacklisted too?
Should we own the free services that we've paid for with money and data? Do we own our identities? Do we own our phone numbers, emails, handles, PO boxes, addresses?
What do you use for identity? And what are your thoughts on this? Am I overreacting?
- deleted 5y ago[deleted]
- gefhfffh 5y agoYou could even argue that you should own your "free" services, since you pay for them indirectly (through buying products of companies that buy ads, and by watching ads).
- shadowgovt 5y agoThe significant risk of the way Google operates is there isn't much firewalling of the services. If one piece decides you're a scammer, that account can lose access to everything... And they'll tie other accounts to the offending one and lock those too. Relying on Google is a single point of failure.
- nathias 5y agosocial logins are a dark pattern, don't use it
- deleted 5y ago[deleted]
- WaxedChewbacca 5y ago
- gw67 5y agoyeah, we really need a decentralized identity service.
- pedro2 5y agoNo, you're not overreacting since it happened to you. On the other side, you are also overreacting. Take a walk. This being said, since you got a scare, maybe it's a good time you buy a 2nd domain from another registar and handle accordingly. PS: how does one find a good domain name?
- cybarDOTlive 5y ago> PS: how does one find a good domain name? brute force checking thousands of examples till you find one that isn't squatted.