4 ms·

I hate this practice of these companies to state "This decision is final", it's insulting and childish when everyone knows that people and especially automated

I hate this practice of these companies to state "This decision is final", it's insulting and childish when everyone knows that people and especially automated systems make mistakes. It makes it even worse wenn we all know that if a person has enough clout or gets enough attention it isn't final. If you are going to say stuff like that, then you should keep your word and when you do make a mistake don't undo that mistake. Live with the bad press you are going to get for being the assholes you are.

ncallaway 4y ago
For me it’s more the “there’s not more we can do on our end” language. The fuck you can’t, you implemented the suspension. Don’t go talking like it’s an act of god that you have no control over. If they’re not willing to change their mind, at least say so.
prox 4y ago
“We reviewed this carefully” - we took like 3 seconds to look at a screen that doesn’t give insights.
- raverbashing 4y ago
  At this point I think chatGPT would have done a better job than Google's "reviewers" (if it's actually a biological reviewer they have doing that)
  - SturgeonsLaw 4y ago
    ChatGPT apologises when it makes a mistake, and corrects it. That alone puts it in, like, the top 20th percentile of human interactions.
2Gkashmiri 4y ago
happened to me a few months ago on github. Apparently "sign in with" lets the dev do whatever they like with your account. In reality, i simply signed in with github because why not and suddenly everything is gone. A single email from github about "engaging in illegal behaviour of star farming so my account is deleted". I signed in to github, i just clicked a bunch of buttons simply out of form fatigue and in the background, the dev had used my account to star their repos. the problem is, why not punish the dev and why me? if the workflow was sign in, why did it allow my account to be used for stars farming? secondly, why to blame me? did i willingly engage in stars farming when i clicked on "sign in with" ? they said the same thing, "decision is final". I made a bunch of noise on HN and tomorrow everything was back in order for me. Learning outcome: dont use sign in with. ever
- xigency 4y ago
  Not sure why you’re getting downvoted. I certainly appreciate this heads-up.
  - deleted 4y ago
    [deleted]
- 8organicbits 4y ago
  Ref: https://news.ycombinator.com/item?id=33917962 https://news.ycombinator.com/item?id=33917962 That's horrible, I'm so sorry that happened to you. But I think that's the wrong learning outcome. As a technology, OAuth uses scopes to grant permissions. You mentioned that you didn't read the permissions before granting access. An app that requests zero scopes is still safe, as it can't star repos for you, but the burden falls on you to read. This is inherent to the design of OAuth. There is a problem with GitHub scopes being overly broad, and users can't audit what an app actually does with those permissions. GitHub and others should be policing apps that request unreasonable permissions.
  - paranoidrobot 4y ago
    > There is a problem with GitHub scopes being overly broad, and users can't audit what an app actually does with those permissions. Auditing is only one problem. Why is granting permissions an all-or-nothing approach? Way too many apps are requesting all the permissions. If I want to use it, I've got zero choice. I want an 'Advanced' option with a way to deselect certain permissions.
    - JCharante 4y ago
      If they're requesting all the permissions then you shouldn't use them. If a random note taking app asks to read my contacts the first time I launch it then I'm going to assume it's malicious.
      - paranoidrobot 4y ago
mrtksn 4y ago
They probably A/B tested it and find that it works, by works I mean people give up and stop bothering them.
nikanj 4y ago
It's final unless you know someone who works inside the company, or manage to catch enough traction on some news site to catch the attention of someone who works there
hoseja 4y ago
It probably saves more money by shutting down scams than it loses even on bad PR, sadly.

ncallaway 4y ago

For me it’s more the “there’s not more we can do on our end” language. The fuck you can’t, you implemented the suspension. Don’t go talking like it’s an act of god that you have no control over. If they’re not willing to change their mind, at least say so.

prox 4y ago

“We reviewed this carefully” - we took like 3 seconds to look at a screen that doesn’t give insights.

raverbashing 4y ago
At this point I think chatGPT would have done a better job than Google's "reviewers" (if it's actually a biological reviewer they have doing that)
- SturgeonsLaw 4y ago
  ChatGPT apologises when it makes a mistake, and corrects it. That alone puts it in, like, the top 20th percentile of human interactions.

2Gkashmiri 4y ago

happened to me a few months ago on github. Apparently "sign in with" lets the dev do whatever they like with your account. In reality, i simply signed in with github because why not and suddenly everything is gone. A single email from github about "engaging in illegal behaviour of star farming so my account is deleted". I signed in to github, i just clicked a bunch of buttons simply out of form fatigue and in the background, the dev had used my account to star their repos. the problem is, why not punish the dev and why me? if the workflow was sign in, why did it allow my account to be used for stars farming? secondly, why to blame me? did i willingly engage in stars farming when i clicked on "sign in with" ? they said the same thing, "decision is final". I made a bunch of noise on HN and tomorrow everything was back in order for me. Learning outcome: dont use sign in with. ever

xigency 4y ago
Not sure why you’re getting downvoted. I certainly appreciate this heads-up.
- deleted 4y ago
  [deleted]
8organicbits 4y ago
Ref: https://news.ycombinator.com/item?id=33917962 https://news.ycombinator.com/item?id=33917962 That's horrible, I'm so sorry that happened to you. But I think that's the wrong learning outcome. As a technology, OAuth uses scopes to grant permissions. You mentioned that you didn't read the permissions before granting access. An app that requests zero scopes is still safe, as it can't star repos for you, but the burden falls on you to read. This is inherent to the design of OAuth. There is a problem with GitHub scopes being overly broad, and users can't audit what an app actually does with those permissions. GitHub and others should be policing apps that request unreasonable permissions.
- paranoidrobot 4y ago
  > There is a problem with GitHub scopes being overly broad, and users can't audit what an app actually does with those permissions. Auditing is only one problem. Why is granting permissions an all-or-nothing approach? Way too many apps are requesting all the permissions. If I want to use it, I've got zero choice. I want an 'Advanced' option with a way to deselect certain permissions.
  - JCharante 4y ago
    If they're requesting all the permissions then you shouldn't use them. If a random note taking app asks to read my contacts the first time I launch it then I'm going to assume it's malicious.
    - paranoidrobot 4y ago

mrtksn 4y ago

They probably A/B tested it and find that it works, by works I mean people give up and stop bothering them.

nikanj 4y ago

It's final unless you know someone who works inside the company, or manage to catch enough traction on some news site to catch the attention of someone who works there

hoseja 4y ago

It probably saves more money by shutting down scams than it loses even on bad PR, sadly.