4 ms·
Verifying people after account loss/compromise is hard. So which would you prefer: (A) A low-level customer service representative can restore your access, bu
by jopsen 2y ago
Verifying people after account loss/compromise is hard.
So which would you prefer:
(A) A low-level customer service representative can restore your access, but said representative is arguably susceptible to social engineering and other human weaknesses.
(B) Your account can be protected be physically 2FA key (yubikey), but on the case of loss/compromised account processes for recovery are hard to navigate and may not yield successful recovery?
In the case of (A) you have little security. In the case of (B) you can do a LOT to prevent account loss, but if bad things happen (whether your fault or not) you are locked out by default.
From a privacy point of view, I'm not sure that (B) is such a bad option.
- 9cb14c1ec0 2y agoWe need both, clearly advertised for what they are, and then all everyone can make their own risk calculus.
- e40 2y agoYou can mitigate (B) by using your own domain with Google Fi and the basic workspace account. That way, if you are locked out you can switch providers taking your domain with you.
- jopsen 2y agoYou still loose data stored, phone number, etc. But you could make the argument you should do backup of cloud services, the same way you do backup of hard drives.
- e40 2y agoTrue, but my Google Fi is attached to a free gmail account (because there is NO way to attach it to a Workspace account!!). For my Workspace account, I backup with Google Takeout every 2 months to Backblaze B2. I also sync (with rclone) My Drive to a local directory, which is weekly uploaded to B2.