4 ms·

I feel like this move by google is incredilby irresponsible. Imagine the amount of people who used gmail to sign up for third party websites whose accounts can

I feel like this move by google is incredilby irresponsible. Imagine the amount of people who used gmail to sign up for third party websites whose accounts can now be compromised via password reset.

davchana 3y ago
do you imply that once google deletes an account, somebody else can sign up for that gmail account, and thus may gain access to 3rd party websites? I don't think google allows username recycling. once deleted, it remains unavailable.
- beeboobaa 3y ago
  > I don't think google allows username recycling. once deleted, it remains unavailable. I was under the impression they would. If not what's the point?
  - Arnt 3y ago
    Getting rid of accounts that can be used to attack you and that you'd forgotten that you had.
  - watson 3y ago
    They want to close accounts with poor security (i.e. no 2FA enabled). These accounts has a higher risk of being compromised and used to get access to whatever they control
    - davchana 3y ago
      yeah, correct. although no one will be able to find (at least easily) that which account or accounts were closed.
  - shultays 3y ago
    Saving space and removing hassle of managing data that is not being used (and likely will never be used)? I think 18 months is way too little but I think the decision is valid
Arnt 3y ago
A googler told me that's approximately why — long-disused accounts were overrepresented among abused accounts. In particular he mentioned that accounts that hadn't been used in a long time were much more likely than the average to have a poor password. To crack down on abuse, they try to force the affected users to become aware of their accounts.
- jeffbee 3y ago
  This is also in the article.
Finnucane 3y ago
I have a google account that I use only for this purpose, I never really log on to it directly. I'm not even 100 percent certain of the password at this point. I guess I'll just make a new one.
spirit557 3y ago
the handles can't be reused.

I feel like this move by google is incredilby irresponsible. Imagine the amount of people who used gmail to sign up for third party websites whose accounts can now be compromised via password reset.

davchana 3y ago

do you imply that once google deletes an account, somebody else can sign up for that gmail account, and thus may gain access to 3rd party websites? I don't think google allows username recycling. once deleted, it remains unavailable.

beeboobaa 3y ago
> I don't think google allows username recycling. once deleted, it remains unavailable. I was under the impression they would. If not what's the point?
- Arnt 3y ago
  Getting rid of accounts that can be used to attack you and that you'd forgotten that you had.
- watson 3y ago
  They want to close accounts with poor security (i.e. no 2FA enabled). These accounts has a higher risk of being compromised and used to get access to whatever they control
  - davchana 3y ago
    yeah, correct. although no one will be able to find (at least easily) that which account or accounts were closed.
- shultays 3y ago
  Saving space and removing hassle of managing data that is not being used (and likely will never be used)? I think 18 months is way too little but I think the decision is valid

Arnt 3y ago

A googler told me that's approximately why — long-disused accounts were overrepresented among abused accounts. In particular he mentioned that accounts that hadn't been used in a long time were much more likely than the average to have a poor password. To crack down on abuse, they try to force the affected users to become aware of their accounts.

jeffbee 3y ago
This is also in the article.

Finnucane 3y ago

I have a google account that I use only for this purpose, I never really log on to it directly. I'm not even 100 percent certain of the password at this point. I guess I'll just make a new one.

spirit557 3y ago

the handles can't be reused.