3 ms·

I actually wish there was a way to opt-out of the suspicious login detection mechanism. I've certainly had nerve racking moments where my login has been flagge

I actually wish there was a way to opt-out of the suspicious login detection mechanism. I've certainly had nerve racking moments where my login has been flagged as unusual and I wasn't sure if it would let me in (and I'm completely locked out of my childhood account though it's not been used in over 10 years) It's a good feature for those with the password "password" but if you've used a strong single use password it just gets in the way

iforgotpassword 4y ago
Yes, this so many times. Whenever these posts hit HN there is some people going "well if they don't do this then a lot of accounts will get hacked" - fine! Fucking make my account vulnerable if I want it to, the chances I get hacked are probably still 10x lower than getting locked out by Google's shit AI crap "protecting" accounts. And well if it does happen, those same people can at least have their "told you so" moment. Fucking bullshit.
bheadmaster 4y ago
I completely agree. If I get hacked, it's on me. Google can even add a "you can't sue us for damages" clause in their Terms (which they probably already have) - just don't lock me out of my own freaking account.
- MattGaiser 4y ago
  I’m curious if they can do this/how politically feasible it is. In Canada, banks have this for things like e-transfers and preventing suspicious transactions. However, when people acknowledge the warnings and still go ahead anyway, they cry bloody murder and the bank ends up refunding people for fraudulent activity the people explicitly authorized after being warned.
rexf 4y ago
This is a good point. 2FA is a great thing and I think everyone should use it. With that said, I don't want 2FA on my alternate/testing/dev accounts. I simply don't want demo accounts linked to my phone number. I'd like to opt-out of "standard security" (MFA) and accept the risks on non-primary accounts.
nicoco 4y ago
I've long enjoyed bridging instant messaging accounts through my XMPP server, ie, logging in to various service from a cheap server in a datacenter, so I'm with you 100%. I'd like to opt of suspicious login for a LOT of services. It's not like anything critical rely on my skype/facebook/otherCrappyOnlineServiceIStillUseSometimes account anyway...

iforgotpassword 4y ago

Yes, this so many times. Whenever these posts hit HN there is some people going "well if they don't do this then a lot of accounts will get hacked" - fine! Fucking make my account vulnerable if I want it to, the chances I get hacked are probably still 10x lower than getting locked out by Google's shit AI crap "protecting" accounts. And well if it does happen, those same people can at least have their "told you so" moment. Fucking bullshit.

bheadmaster 4y ago

I completely agree. If I get hacked, it's on me. Google can even add a "you can't sue us for damages" clause in their Terms (which they probably already have) - just don't lock me out of my own freaking account.

MattGaiser 4y ago
I’m curious if they can do this/how politically feasible it is. In Canada, banks have this for things like e-transfers and preventing suspicious transactions. However, when people acknowledge the warnings and still go ahead anyway, they cry bloody murder and the bank ends up refunding people for fraudulent activity the people explicitly authorized after being warned.

rexf 4y ago

This is a good point. 2FA is a great thing and I think everyone should use it. With that said, I don't want 2FA on my alternate/testing/dev accounts. I simply don't want demo accounts linked to my phone number. I'd like to opt-out of "standard security" (MFA) and accept the risks on non-primary accounts.

nicoco 4y ago

I've long enjoyed bridging instant messaging accounts through my XMPP server, ie, logging in to various service from a cheap server in a datacenter, so I'm with you 100%. I'd like to opt of suspicious login for a LOT of services. It's not like anything critical rely on my skype/facebook/otherCrappyOnlineServiceIStillUseSometimes account anyway...