5 ms·
This is exactly right. I just finished the process to get drive.readonly for my app. It was a huge pain in the ass, and Google was not very helpful. Google rec
by mgraczyk 2y ago
This is exactly right.
I just finished the process to get drive.readonly for my app. It was a huge pain in the ass, and Google was not very helpful. Google recommends you pay $720 for a CASA lab assessment, which consists of some random dude in an apartment in SF running an open source script against a .zip of your codebase, then that guy emails Google saying you "passed".
However, the goal is noble, to prevent malware and scam apps from accessing people's drives. It doesn't sound like the app from the article needs these more restricted scopes.
- Gigachad 2y agoBeing a huge pain in the ass probably does filter out a lot of trivial malware that doesn’t have the resources to jump though these hoops, especially when it might only last a week or so before they get shut down and have to start again.
- xethos 2y agoIf you've covered the personal frustration angle, I'll point to how it also changes the financial odds of turning a profit with malware. ~$700 USD for a week (before getting discovered) means you better turn a profit fast - and if you can't, there's not much point getting that full storage scope
- sidewndr46 2y agoIf that's the case then a $700 bond would be sufficient
- Gigachad 2y agoWho is paying the security auditor then?
- sidewndr46 2y agoThat's the point, the security auditor is providing any service other than being a barrier.
- therein 2y agoDo you think this may allow us to reintegrate the security auditor back into the productive workforce after a brief period of adjustment?