Unable to deal with Chrome Extension Team, Kozmos is shutting down
kodfabrik.com
kodfabrik.com
Naive question to you and to other extension developers here ... how does Firefox do when it comes to this issue? Is it just that the market share is so much lower that it's not worth developing for FF? I ask this as a happy FF user on mac, linux, ios.
The most painful incompatibility I've read about was in the Bitwarden extension, which basically doesn't support most operations in Firefox private windows because Firefox intentionally doesn't support getBackgroundPage() from there, and Bitwarden architected their extension to use that for all IPC between their frontend and backend layers. You can avoid that incompatibility by using runtime.sendMessage for that purpose, but they didn't know that at the time they wrote it (there's a warning about it in the MDN docs for getBackgroundPage now, but that warning wasn't there at the time). We happened to have gotten lucky in our extension in that we use sendMessage for the same purpose, but we certainly didn't know about that incompatibility at the time we were making the architectural decision.
Beyond just making it work, our team would also want to be able to automate regression tests against Firefox if we were to officially support it. For a long time, selenium was the most realistic option for that, but we switched away from selenium to puppeteer a year ago due to reliability issues with the former. Now that Firefox support in puppeteer is very recently starting to stabilize, we're hopeful we'd be able to use that, but we haven't tried it yet and it's new enough that we wouldn't expect it to be fully compatible/stable yet.
Edit: no need to reply, I've seen your answer below, thanks.
I was part of a student association when I was an university student.
Part of the activities was to host gnu/Linux courses record them and upload them to YouTube.
One day, out of the blue, the channel goes dark and nobody knows why.
We all panicked. We had received no warnings and there was no way to appeal.
In the end, we asked some former students that were employed by Google to pull some levers internally, and we managed to get our channel restored.
Worst of both worlds. Can I get a refund?
You’re better off with a highly rated news.yc post.
I've seen similar situations happen with Facebook, where entire businesses with what you might think were significant ad budgets were completely shut out of advertising on FB because its system for advertisers was broken yet again. I guess if you have a very small number of channels that are totally dominant, as Google and FB now are, you can afford to throw away a thousand here or even a million there if it saves you millions in support costs.
Whether organisations that have become so dominant should be legally allowed to do that, given the unfair adverse effect it can have on others operating in the ecosystems they create, is a different question. Just as we have laws about monopolies and limit what they can do in other contexts, maybe it's time for the handful of businesses that dominate online advertising or marketplaces to be regulated for the protection of everyone else.
It's more like dealing with a blind automaton, and that's becoming more common outside of Google, too. Automation support scales well because the fixed costs are high but the marginal cost is low, human attention scales poorly, with a high marginal cost.
I'm serious.
Why let "government code" be subject to all the shortcomings and pitfalls of natural language when you could just use cold hard logic and exact math instead?
Natural language is just programming for humans, anyways.
This unreliability that comes from agency of the individual compute nodes has some very important benefits: the system is much more resistant to bugs in code[0], and much more humane. Software, as it is today, doesn't understand morality. That's e.g. you wouldn't want to automate away judges in the justice system - the law is code, but it's buggy, and isn't complete enough to handle all cases in all contexts. You need case-by-case judgements, and that's why it's good to have human bureaucrats who can independently think and override the system as needed. Otherwise, the system would just grind people that fell into it.
--
[0] - Like, "you have to deliver document X before 14th to get something done, but the document is only available from 23rd". Happened to me during university, where some scolarship depended on a government document that you could procure only well after deadline. Of course, the secretary at the university knew this and let you fill in incomplete application; she'd wait for the whole allowed processing time, then send you a letter asking you to bring in missing documents and giving you 14 extra days. Given that this was a bug at an intersection of two bureaucratic systems, if this was software, it would likely go undetected for a while, until someone started to wonder why nobody is applying for scolarships anymore.
Allow the benefit of doubt that a "software-based" system would only be implemented, if it were superior in such a way, that such a situation doesn't even occur in the first place. That is the benefit. It alleviates the necessity for the "human-wiggling-around-laws-that-actually-make-it-illegal-what-you're-doing,-but-those-laws-are-stupid,-so-whatever,-we-don't-care-about-that-specific-law".
It's most likely a very unknown concept for anyone presently, since it doesn't yet exist, but I believe, if human civilization works more on the aspect of creating a universal law that is language-agnostic, we would have a better solution than the ones we currently have.
Also, tax filings and the like are basically automated. It's just about expanding such automated concepts for more efficiency as well as removing the language-bias laws exhibit. I'm fully aware of the shortcomings of automation, and also do believe that a human "arbitrator", or judge, is required and preferred.
But in essence, my goal in stating my opinion was to plant the idea of language-agnostic law, for which maths, code and logic can form a solution. It's philosophical pondering towards a global government policy in a very long-run.
So did the Mars Climate Orbiter.
That is, indeed, that natural conclusion of the deeply flawed premise that law and regulation are basically computer code written by programmers who have to contend with buggy, sometimes malicious, computing units.
But other than the fact that the word “code” is often used in reference to each, law/regulation and computer code are not the same kind of thing.
> Why let "government code" be subject to all the shortcomings and pitfalls of natural language when you could just use cold hard logic and exact math instead?
The fuzziness in law and regulation is very rarely anything close to minimum required because you are dealing with natural language, and very often deliberate to create room for flexible application. And there is a strong overlap between the places that that is least true and widely perceived gross injustices in the law.
> Natural language is just programming for humans, anyways.
No, it's not.
Having spent a fair amount of time working in various bureaucracies, and studying law and government administration, that's very much not true. It's very much the idealized view that many people outside of bureaucracies have of them, especially people in computing, but it's very much not a good approximation of most real bureaucracies, or their governing law and regulation, because the latter usually is written in a way which deliberately relies heavily on discretion within (often deliberately fuzzy) constraints rather than seeking to provide deterministic rules for outcomes, and in many systems regulation is actually written by the bureaucrats enforcing it (who also tend to have disproportionate influence on shaping the actual law).
As explained below, I don't agree that it's a good idea to replace bureaucracy with code. However, I think the lessons our industry has learned in architecting software systems could inform designing efficient data and request flow within a bureaucracy. At the very least, it gives us language to talk about bureaucracies as systems.
This I definitely agree with; it's kind of disappointing the information systems engineering knowledge has tended to become siloed within organizations dedicated to information technology, because you get much bigger gains if you apply that knowledge to broader processes, not just within computing systems supporting the processes. OTOH, with people who have that knowledge generally getting paid more to apply it in IT (and getting listened to more there), it's kind of understandable if unfortunate that the knowledge gets stuck in IT.
I am 99% on DuckDuckGo and other search engines, Firefox (which is great), Lots of mail providers these days which excel on every front, lots devtools that don’t need any Google infrastructure,
I really hope one of these days we get a message from Google (btw Google is really the most faceless organization out there, I really need to think hard to give you any names) that they will change their tune, but until that time, its best to leave.
The last straw will be abandoning Gmail :)
With every account you get a finite number of aliases you can create, but in practice that number is high enough that I just use a new alias for every site I visit.
Unlike in Gmail, these aliases don't contain any references to your original address. So if you're signing up for a dogwalking service, you can create an alias for `ilovewalkingdogs@fastmail.com`, and then if you start getting spam to that address, you know where it came from, you know that there's no chance your real address will be reverse-engineered from your alias, and you can auto-reject or sort everything to that address into a separate folder without affecting any of your other emails.
I have separate email aliases I distribute to friends and family members so that if I ever run into a doxing situation or for some reason need to go nuclear on my email, I can turn everything off except for them. I also have my email linked to my own domain of course, but when I sign up for most commercial services, I use @fastmail.com aliases. That way I know that there's no way for those services to track me across accounts/websites via my personal domain name.
And everything gets organized in the same inbox, same account. I consider it to be a killer feature.
With some you can do the + trick (which gmail probably still does) but i just have my domain as catchall and it works pretty great with blacklisting.
If you're using the + trick, you haven't gained any privacy, because I can strip the + and get your original address.
If you're using a catch-all domain, you haven't gained any privacy, because the domain remains a unique identifier for your all of your accounts. It's good for organizing, but not for privacy, because you're still publicly attaching your identity to every email you send.
With fastmail, I don't need to do myaddress+walmart@fastmail.com or walmart@danshumway.com. I can just do walmart@fastmail.com. That's a really large privacy win, since it gets rid of one of the biggest and least regulated unique identifiers that services can share with each other.
I don't know if other providers like Outlook are also offering 'real' aliases. I'm happy if they are, I think this should be an industry standard feature. Either way, switching to any provider does will be a pretty significant feature upgrade over Gmail, even if you're currently using a paid Gmail account with your own domain.
So It so different from random domain catchall?
The reason why i would be worried about Fastmail is that they have are Australian company with servers in US. Both of those mean that Law enforcement can simply ask for users emails.
Now i am for sure not target of Law enforcement or goverment so i dont care but i am not sure why i wouldnt use service thats in better juristiction and is privacy focused.
I think I may actually migrate all my email over today. The idea of having a different interface to GMail is pretty exciting. I’ve been staring at that (increasingly slow) interface for too long.
20 years ago I certainly wouldn’t have imagined myself doing this, but it actually seems like decent software now. Sure I need to jump into bed with MS, but that doesn’t bother me nearly as much as Google.
Here, fixed it for you.
They certainly did their best to prevent any other OS from being on your hardware.
I mean Steam was made as a panicked reaction when Microsoft announced its Windows store. People in the industry knew very well what they were trying to do.
I may recall it badly but I am pretty sure they opened it to general companies and indie studios as a reaction to Windows 8 built-in app store:
They coined the term embrace, extend, extinguish. See the history of Internet Explorer.
Maybe this text on your front page is triggering someone at Google extensions department?
The police should/would tell you.
I haven't used Chrome since I've left Google and would recommend everyone to move to an alternative non-Chrome-based browser for a more balanced ecosystem. All the bad behaviour can be avoided when companies actually need to look after retaining users and taking care of not so frequent cases and I hope better business practices can come up without the need for government intervention.
Sorry, this is the only explanation I have for this, I've worked with this kind of person twice. Once they got the first version of something running they are done, no further testing, no sanity checks, no asserts or logger.warn() for "this can never happen" branches.
BTW, this doesn't have to be a conscious choice of anyone at Google, it could just be the way the incentives turn out.
Until Firefox or Edge catches up in both performance and implementation compatibility to make Chrome-first sites work, extension support isn't incentivized
There are a large number of user-hostile behaviors that stretch across industries: ad-funded software, app stores pushing microtransactions, wildly inconsistent interfaces and behaviors across DOM-driven software, opt-out behavior for things like arbitrary internet access.... user unfriendliness is the default state of software and even the most user friendly software still neglects the needs of many of their potential users.
This is a fact of software built in bounded time to be resold for passive income and “support” (which means “bug explainer” and possibly “refund-giver” in most corporate cultures).
Building software is hard, generally, and takes time, generally. Just because you can throw up a set of microservices in a day doesn't mean you can build a properly competing product that quickly. And as time goes on, the standard of competition gets higher and the barrier to entry gets higher, because user expectations grow over time. So most software isn't competitive.
At the same time, it seemed to not have had that many users yet, so, a bit early for Google to pay attention?
So your theory about Google wanting to run a bookmarking service I think is correct. Human curated links continue to be the only source of semantically relevant content. Everything else is algorithmic extraction of the relevant associations created by humans.
I have stuff saved in there dating from 2007 to 2015. Used to use a Firefox extension to load them in the sidebar.
I don’t use Google extensions on Chrome, and increasingly I don’t use Chrome.
That's what finally started bothering me enough, I don't feel comfortable keeping my search history and email in the same basket.
I'm currently in the process of switching to protonmail.com, which has been a positive experience so far.
Chrome supported/promoted its extensibility early on because it was seen as a competitive feature when compared to IE and Firefox at the time. At the time, FF supported a huge library of extensions, and Chrome's job was to eat FF's market share (and IE's). Thus, extensions were an obvious thing for them.
Now, extensions present pretty much nothing but problems for Google:
* Features that compete with Android * Features that compete with their own offerings, like Pushbullet * Features that actively harm their offerings, like adblockers * Features that actively harm their enterprise customers, like anti-paywalls
There's NO upside now for Chrome to support extensions, and ALL downside. They certainly don't need them in order to keep browser share. Too many people use it now.
By the way that description is one aspect of a monopoly (no, I don't want to start that discussion. Just pointing out that that behavior isn't possible in a competitive environment).
Isn't one of the 'main' criteria around anti-trust how a company impacts the consumer ? this sort of thing sounds harmful to the consumer (fewer choices, actively taking down products consumers use, etc.)
Exactly. This is basically a replay of the way Microsoft treated developers of third-party Windows programs in the 1990s. Only the time scale was different; you typically had at least a few years before MS either integrated your killer feature into Windows, or changed something about the Windows internals that broke your program, either way killing your business.
In my case, I make a nice little side income from that extension so it would be a noticeable income hit. But I'm not sure of anything I can really do to prevent it from being shut down if and when Google's robots decide the time has come.
Sorry, not trying to be obtuse, just curious from a side-income perspective.
Paying users seem to be part productivity nerds who maybe aren't technical enough to grok installing from the repo, and part people who just choose to pay for the automatic upgrades or to support the developer. Also, lots of users are web gamers who use it for in-game automation.
I wrote a post about it 1 week after monetizing, if you're curious: https://critter.blog/2020/01/14/week-1-of-monetizing-my-chro...
Me: Hey, this must be a mistake
> Google (Robot): No mistake, review these policies, your extension violates one of them
Me: It does not violate any of them, this is a mistake!
> Google (Finally human): Oh, sorry, a mistake.
Obviously someone just needs to create a robot that automatically replies to the takedown notices and disputes them, thus closing the loop!
Also, someone would have to program that bot and can you even imagine how dead inside you'd feel if that was your life?
Would you feel dead inside if your tool helped developers keep their projects online? Sounds rewarding to fight the big guy and keep cool projects online.
Even with my trivial side-project and a grand total of two releases so far, Google ar itrarily rejected one release for being "spammy" when there was literally a 5 line diff between it and the previous release. Thankfully just finding the depreciated dashboard and uploading an icon (the "new dashboard" doesn't have this feature yet apparently) got it through after resubmitting it.
It feels like they've set themselves as gatekeepers of Chrome extensions (Windows users can only install from the "store") but they aren't actually interested in doing the job even though you pay an admin fee for the privilege of developing a free extension for their browser.
I couldn't ask them to switch browsers for my little side project. I have to co-operate with Google's bureaucracy. For what it's worth, so far it seems like Mozilla is not exactly streets ahead, but at least they didn't charge me and they seem to be fairer and more helpful to extension developers (they have a "self-distribution" mode with relaxed oversight I used while in private alpha, and their tools and docs are better).
When Chrome was better, I suggested friends and family use Chrome. Now I think most people would benefit from using Firefox as their primary driver.
I think we as developers overestimate the resistance to switching.
This is a great but only a temporary solution. Firefox is taking jabs at extensions not on its recommended list with slightly scary warnings.
Firefox as a privacy focused browser should give users the ability to limit permission or sites extension can run on - including click to run option.
Without this, they'll soon go the way of chrome.
Heck Chrome started locking down extensions when they started catering courting enterprises. And they included the ability to make extensions uninstallable.
Bad actors took advantage of it, forcing chrome to tighten things further until extensions could only be installed from the store.
One way to tell if a conspiracy is crazy is if it doesn’t benefit rich people. This pretty clearly passes that test.
Yes, it really is the same guy: https://kodfabrik.com/journal/i-ve-just-liberated-my-modules. And, joking aside it would be wise to bear in mind that we're reading only one side of the story here. As with leftpad, there's another side to this.
With leftpad he told Kik, "fuck you" (https://medium.com/@mproberts/a-discussion-about-the-breakin...), and then wrought global havoc on npm users. Now he's claiming the Chrome Extension Team "continuously troll developers", and is pulling down something he's created... again.
I only have two data points, so the behaviour here is a coincidence rather than a pattern, but I will guarantee you whatever you think of Google there is more to this than meets the eye.
I'm not without sympathy for the author, but neither am I about to uncritically take his side.
They removed that permission to limit it to only Pushbullet, and then were able to get back on.
I'm not saying there couldn't have been more hand-holding - but it wasn't exactly like it wasn't for a fairly egregious security breach.
(Disclaimer: I work for Google, but not in any Chrome/Android/Store team, or anything even vaguely related to that - this is purely my own opinion).
If the PB team hadn't gotten it to be as visible as it was, they very likely would have gotten away with it.
Regardless of that, just tell people what they've done wrong, developers are surely jaded by being told absolutely nothing about what or why some faceless mega corp is trampling all over their day.
Is it any wonder people like OP lash out in frustration and just pull all of their work when one has no means to obtain a straight answer? The man has a young child, and that is work enough, but it also puts things into perspective, and honestly, as a father of a months old child, I'd probably respond to this in the same way and think "fuck it, one less frustration" and just pull it too.
The PB post describes them removing permissions they realized they didn't need, you can check their writeup. Google's handling of this was poor but PB had real problems.
In this extension's case, we haven't even seen what notices Google sent.
That said, calling Google heavy handed is an understatement, and there have been several cases which have made it clear that kicking up a fuss online and being big enough to get some attention is the only means for recourse.
But Google just said "you're asking too much permissions". After the first fixes the extension got rejected again, without explanation.
And the other (I think more important) point was that we know even less about whatever happened to Kozmos.
Rejecting a fixed version is not lack of "hand-holding", and far-reaching permissions are not by default a "major security breach" (unless Google has a policy of shipping products with major security breaches built in?)
You can't just trademark 3 letters in a way so that nobody else can use them. In fact there's hundreds of trademarks that are the letters "kik" in various logos[1].
What they trademarked is a bunch of specific logos containing those letters. Doesn't prevent other people from also using those 3 letters in some other way.
In fact when he wrote "kik", my first thought was the he was talking about the German textile discount store - which is the first result for me when I google those letters.
It's easy to be an armchair HN lawyer when you have no skin in the game.
As an attorney, do you think he was misusing the "Kik" trademark?
I don't know all the facts here, but I do know that as a practical matter, it comes down to a whole bunch of factors, among them, use in commerce, possibility of confusion, etc. But I can say that judges take a dim view of people who tell others to "fuck off" and who appear not to have a justifiable reason for using a name nor a long history of doing so.
I also know that bullies don't always win - Nissan Computer still owns nissan.com, not the motor company.
I'm shocked to see that something like this could happen on npm - where a single threat of getting lawyers involved can get your package transferred away from you. It really wants to make me not publish anything on npm too actually.
Per my anecdotal experience, they are really good at choosing the outcome that benefits them the most/harms them the least - which wouldn't upset me since most companies do this, but it's Npm's "we're here for the community" type of fake attitude that has always bothered me.
OK, so the is more to it than that and he did have a genuine grievance (I forgot exactly what) bit in dealing with that he caused a pile collateral damage for innocent bystanders.
(Innocent bystanders who errantly put too much faith in dependency oriented programming which brings us back to the broken system)
That said, the system is definitely broken.
His reaction to the Kik thing is probably where he was at fault, I think it would have been reasonable for him to back down there; companies, in the US at least are obligated to protect their IP in order to retain their rights over it (as far as I have understood from various discussions on HN), but perhaps the forceful lawyering got his back up?
Also I have no idea of jurisdiction of any parties involved, I just assume US.
and who need an external package to leftpad a string... the most fascinating part of that story to me...
Which is why it's a distraction to even consider this particular person's track record.
Even if this same person pulled one critical package a month for the next year, the fundamental problem is still that the ecosystem in general relies on parties with no obligations to manage critical dependencies.
In response to a threat starting with "We don’t mean to be a dick about it" and ending with "our trademark lawyers are going to be banging on your door and taking down your accounts and stuff like that", I did say "fuck you" to Kik.
If that makes me the character in your mind, enjoy your imagination.
And he did offer them a solution: $30,000 dollars, to which they promptly - albeit indirectly - replied with fuck you.
I’d say they made a logical decision.
In any event, escalating - even when you think the other party is being a dick - is never the right answer.
If you're hiring a lawyer off a television commercial in order to make a quick buck off of a fender bender. Corporate law is different.
And as an attorney, if I go back into practice someday, of course I’ll do the same.
> and we’d have no choice but to do all that because you have to enforce trademarks or you lose them.
They aren't threatening him for the fun of it, this is classic trademark stuff.
Also the "solution" he offered them was:
> Yeah, you can buy it for $30.000 for the hassle of giving up with my pet project for bunch of corporate dicks
Would _you_ give this guy $30,000, after he calls you a dick multiple times and tells you in no uncertain terms to fuck off?
No one comes out looking good in this interaction, don't get me wrong, but Azer was super unprofessional and nasty during those interactions. He gets no sympathy from me.
It’s “classic trademark stuff” insofar that people classically don’t understand what a trademark is or how it’s enforced.
Consider reading through Github’s policy on trademarks[0] to better understand why a casual fuck off should be given whenever you get misleading, threatening emails.
[0] https://help.github.com/en/github/site-policy/github-tradema...
And just because it's a lawyer does not make things better. If you want me to cooperate, try to be nice. If you threat me, don't be surprise to hear a 'fuck you'.
Does he even have to be “professional“? Even though two of the parties involved happen to be corporations, he owes no allegiance to them and the exchange does not take place in a corporate context. I mean, we are talking about corporate overreach, why should we be assessing his words by corporate standards? “Professional” usually means “don’t show emotions and suck up the abuse”. I’m glad he was both showing his protest and standing up to the overreach.
Can others judge him harshly for said decision? Yes.
There was a time when hacker culture was associated with rebellious and playful values. Such an irony on Hacker News we are discussing if he should be penalized for saying “bad words” in the face of corporate unfairness.
We must pursue our trademarks or risk losing them. We must. So can we make this amicable instead of hostile?
The maintainer could have requested things like "Okay can I make some blog posts and you help me with some SEO to make sure people are aware of the changes to my project name?" etc. Sounds like Kik was willing to be reasonable and help where they could. Clearly they could have gone in with an opening statement saying "this is the lawyer, I am sending trademark takedown notices, fuck you, go to hell" but they clearly did not.
This is one person trying to make the best of an awkward situation, and one person just saying "duces".
> Using another's trademark in a way that has nothing to do with the product or service for which the trademark was granted is not a trademark policy violation.
Many people think that if you have a trademark, you have to sue everyone who uses your name no matter what capacity they're using it in, which doesn't seem to be the case. If their usage is unrelated to yours, you have no authority to prevent them from using it however they want.
There are some exceptions to this, like the American Red Cross's logo of a red cross on a white background (nobody is allowed to use this except the red cross in any context, although it isn't always enforced) [1].
[0]: https://help.github.com/en/github/site-policy/github-tradema...
[1]: https://www.bradley.com/insights/publications/2012/04/one-cr...
And that's where it definitely stops, but people get carried away and imagine now if Alice tells Bob, "Enough, I need you to stop doing X by this reasonable time" and Bob says "Fuck you Alice" and keeps doing X the court will rule for Bob. Nope. And they imagine Bob's friend Charlie might show up too, and do X and Alice has to accept that because she told Bob previously it was fine, again Nope. As a result some businesses become convinced that unless they pay lawyers to threaten every hobby project starting with the same first letter as their product the terrible "estoppel" will destroy their business.
Also just as a general principle lawyers are for avoiding disputes first, fixing existing disputes as a last resort. If you're actively paying lawyers to start shit you are probably Doing It Wrong™.
If he was releasing a messenger app called KikAss, then sure, they “must” enforce the Kik trademark.
But if I release a brand of shoes called Kik, with an api that allows users to poll how many steps a user has taken that day, that’s not a trademark violation.
Trademark violations require intent to mislead, or they could be unintentionally confusing (for example, if Kik has been talking about releasing shoes for a while or if it’s a well known brand of soccer balls).
Neither of these things have occurred, so the trademark doesn’t have to go through a (futile) enforcement process.
Not long ago I was involved in a company that defended their trademark. The other group said to us 'f- you' and refused to comply. They then continued to do marketing and interviews with our brand name and an almost identical logo. It's like they were trying to dig a hole.
So that behaviour actually just created more evidence of infringement. We contacted their partners and explained the situation and they started pulling their support. They lost half their board members. So eventually their own lawyer said "Hey guys, we really should comply." and that was it.
No money exchanged hands and we only dropped 30k into a lawyer. I assume they sunk money into rebranding, lawyers, new partners, and a whole bunch of things because they were being petty.
Is this a legal requirement?
The next sentence also goes on to say that either one of those two needs to take place - again, referencing more than one way a trademark violation could take place.
Maybe my English wasn't clear. English isn't my first or my most recent language, so my grammar sometimes goes a bit funky.
The sentence taken as a whole does not make the wrong part right. That you think we must not have noticed the rest of the sentence demonstrates that you don't know why it is wrong. You are choosing to get defensive instead of accepting a correction to your grammar that you acknowledge as being funky.
> Maybe my English wasn't clear.
What is the effective difference between your English being unclear and the correction being written in a way that makes it wrong?
No, they don't, only probability of customer confusion.
Criminal counterfeiting charges require intent, IIRC.
> or they could be unintentionally confusing [to the customer]
> Trademark violations require intent to mislead, or they do not require intent to mislead.
You are trying to assert that this makes sense and that the second half makes the first half correct. Neither is true.
——
The sentence reduces to “trademark violations are considered to have taken place regardless of when there is either an intention to mislead or if a customer was unintentionally misled.”
If the grammar was poop and you can’t make a good faith reading of it (to go so far as to follow me around on this post) then by all means feel free to comment away but I won’t be responding to it.
How do you know unintentional confusion did not occur?
You're lucky you were treated as nicely as you were. It could have been a whole lot worse.
Lessons learned:
1. Hire an attorney when you get a takedown notice if you think you are likely to decline, and seek counsel before responding.
2. Telling people "fuck you" doesn't get you anywhere, and it doesn't matter how impolite or wrong you think the other person is.
That's essentially what the lawyers at my friend's company told them as well, as they're dealing with a similar problem. Just because you have lawyers doesn't mean the answer will be any different; you very likely won't be able to deal with a lawsuit from a much larger company.
If anything, it made me feel both unwise and ignorant, so I addressed that by going to law school and passing the bar. I have a great career and I keep my nose clean.
I also have a different perspective now - one of the creator instead of the consumer. And I disagree that Goliath always has to win. Sometimes the big guy is wrong; and thank goodness we have folks like EFF to help out when they abuse their wealth and power. When the little guy is on the right side of the argument, I will also stand up for them.
Keep in mind, too, that Kik doesn't exactly have overflowing pockets. They can barely pay their bills and nearly shut down last year.
Your own comments come out as one-sided as anyone can be...
We all know that Google's support sucks, even they know it very well, just they don't give a shit. Everyone's pissed about this for years - anyone who ever tried to debug adsense, gmail or youtube account getting blocked out of the blue, or android app being flagged for no reason has gone through pretty much the same process this guy describes. Internet is full of horror stories of this kind, it's very well documented.
The only difference here is that most of us goes "c'est la vie" ¯\_(ツ)_/¯, and we continue using their services because - well - everyone else does it, what else could we do... while this guy doesn't mind giving them the finger... which will, and of course he knows that, hurt him much more than Google - but that's a move to be respected imho...
You seem to want us to question the narrative based on the likability of the developer, but is it really relevant? Can you really imagine a data point that we don't know that will change the narrative of "solo developer getting steamrolled by corporate machinery"? Because that is what is happening in both cases. I want to be clear, this is not even about the solo developer actually being in the right, it is about the process or lack thereof that takes place to reach the conclusion. You might not like this particular guy, but I guarantee you a more likable guy would be/will be/is being equally strong-armed in these lopsided processes. Transparency, accountability and fairness would make all of us happy and not left guessing who might be right based on who writes the most likable emails or has the most popular brand.
So while his "likeability" is completely irrelevant, how else would we even hear about these issues if he didn't make a big fuss about it? I think that also might explain why we heard of this story twice from the same developer. The truth is people face similar issues every day but no one hears about it. I'm glad that some people kick up a lot of dust and make the issue visible to everyone.
Developers are often pushovers (no disrespect, I'm often one myself). Anyone who isn't gets passive aggressively labeled with terms that make them easy to conflate with actually bad people.
Give 'em hell, Azer.
Npm not only didn't realize that this guy was more important to their community and NodeJS on the whole than a one off from Kik, but they sold out to GitHub / M$FT.
All that for something that hasn't been updated in 2 years https://www.npmjs.com/package/@kikinteractive/kik
Granted, all I know of the author is based on what I've seen of his past behaviour. That does make me a little sceptical that his account of events represents the sum totality of truth around the situation. I don't believe that's an unreasonable perspective.
It does not mean the account is false, or that I lack sympathy for him[1], or that I'm unwilling to see or understand his point of view. What I was concerned by is that in the comments I was seeing nothing but unalloyed support, which I did not think was warranted based on what we know. I think I've been pretty clear about that.
I also think it's a shame that he's chosen to yank the extension, but that's obviously his choice and I can understand why he made it.
[1] Different context entirely but I've had my own issues with Google's algorithms, along with the sense of being left in the dark about why. I made some, actually useful, changes but I've still no idea if those are the reason the issues were resolved. Regardless, I'm glad that they have been resolved.
"Oh I didn't know there was a company with that name" well, now you know. How would you like to go into NPM and find someone has created a package with your or your company's name?
At the same time Kik's answer of "we're nice people but we're sending the lawyers" does not come across as friendly.
And yes, NPMs response is not surprising. They're going to side with the trademark owner, unless there was a very good reason not to (like the MikeRowSoft case)
Note to npm (or some future package repo site): create package namespaces. Allow renaming and maybe aliases.
I have a friend who encountered a similar scenario with a company claiming trademark on a name. In their case they simply changed the package name. It was frustrating but it meant everybody was able to move on without any drama. Subsequently, as far as I'm aware, the trademark holder has never even published a package under the original name. So I suppose that makes it doubly irritating, but such is life.
I think your suggestion would have neatly avoided a lot of these kinds of issues in the first place.
It feels like to me that they have just become a sprawling mass of interconnected yet disjointed divisions but without any real customer service department that can handle the amount of requests or situations like in OP. I am not on their side in any way, but Occam's razor and all, it just seems the most likely explanation to me is that they are just too cheap to pay people to handle the volume of customer issues they have? Or would it not be economically feasible? What do y'all think?
[Edited to divide into two paragraphs for slightly easier reading]
Undoubtedly, for the Chrome Store as well as all of their other properties.
Ultimately, Google's business model is about earning fractions of a cent per view/download and making it up in volume. Their profit margin depends on relentless cost optimization, and humans are inevitably the most expensive part of their support/maintenance systems.
Google undoubtedly doesn't want to put extension writers out of business, but if they adjust their procedures to give cases like this real human attention then they will undoubtedly allow a few dozen spammers/scammers to also receive human attention.
(Note: I present the above without judgement. If I were to add my judgement, I'd say that I don't think that this state of affairs is a good thing, and in the long run we may need to reconsider whether algorithmic promotion of content without human oversight is viable.)
Actually, the way they've expanded their range of products I'd wager they've put quite a few people out of business. It's especially bad if your business happens to not be one of the ones they acquihire, but one of their competitors, as evidenced by a handful of antitrust lawsuits.
That's fine but at least have a human review before taking disastrous actions like taking down extensions, lockdown Gmail accounts. If you can't afford even that at least have an appeal process where human would review the case. If you can't make the economics work even for that maybe just don't run the app store.
https://cloud.google.com/support
There's a variety of different tiers to suit your required level of support, and some products (e.g. G Suite) come with free in-built support.
(I work as part of Google Cloud support organisation).
If GCP wants more adoption then you have to fix this shit. Seriously.
Can you assure me that if I move to GCP, have a VM get infected and you ban my GCP account, my personal account will never get banned too? Or that of my next employer? Because I keep reading about that happening...
So for example - say I have a personal Gmail account (e.g. cute-boy-88@gmail.com)
But if I was working for a company that had spun up GCP infrastructure - my work would likely provide me with a work email address (e.g. trevor.jacobs@bankofengland.co.uk) - which I would use, rather than cute-boy-88@gmail.com.
This also covers the use-case that for example, you leave the company (in which case the company still controls those accounts), or an employee goes rogue and tries to takeover their work account.
In general, you would try to keep your work/personal accounts separate - you're not going to put your personal account as the recovery email for your work account for example. Your system administrator (or IT team at work) is going to be the one who resets your password, or recovers your account - and they're not going to send private work passwords to a personal email account (or they shouldn't).
Hopefully the above helps.
Is that enough for the ban to follow through and hit both?
Now do that for every app and extension. And repeat it for every single version that is ever uploaded.
1. Non human (AI) usage for termination google accounts. 2. No repeal process
At least some employee from Google here in hn must do things and understand mentality of other people.
It increasingly looks like - well... we employees live in bubble but if you are unlucky then you are screwed. Do not ask us?
What kind of programmers wrote such code that terminates account without human intervention? Please do not blame it on Project Managers.
You are human - so is some one that was affected by your code.
Amen
One who gets paid half a million a year to not question the policies and their consequences and just does what they are told?
Google needs a damn union just to get some reason in the building.
The problem is not mainly with how Google treats their employees (though there's definitely something wrong there), but with how they treat their customers.
Hell, I’ve met more investors footing my salary than board members per se, and they definitely have zero interest in employee negotiations—that’s what management is for.
I'm pretty pro-union in general but I don't follow your reasoning. Cops are unionized, and when they murder innocent civilians in broad daylight, the unions are right behind to pay for their legal defense. Unions don't bring reason to a workforce; they merely represent that workforce.
So basically the worst form of slacktivist hypocrites.
Anti corporate soapbox or google job, please just pick one.
I tried again the next day, same results. That was 4-5 days ago, and still nothing. I'm abandoning Google Voice because I assume Google has abandoned it. It's not like there's anyone I can ask.
This is just an inconvenience to me. I can't imagine what it's like to have a service I actually rely on and then lose it.
If you need to depend of them for a specific service, don't. Go with an actual business that cares and have the focus on what's important, and more importantly a customer service that listens.
I went with a dedicated VoIP provider, and the service has been excellent
SMS is available as a FLOSS app (I use the F-Droid voip.ms app), or through another portal - able to be sent/received through email, another number, or a web interface.
I honestly have only good things to say about them (despite being a consumer of their seemingly B2B product). As a disclaimer, I don't work for them, have no affiliation with them, and made a point of not using any kind of referral link.
It's getting more common, too. Just the other day I found out that posting links in a youtube comment makes the comment invisible to everyone else. In hindsight, disallowing links is almost certainly a good policy and it's easy to understand and appreciate why it was put in place, but why the gaslighting? Just pop up a box explaining that links aren't allowed. The gaslighting isn't going to fool spammers for long enough to be a meaningful deterrent, but it is going to trip up legitimate users enough to meaningfully degrade their experience.
Time to visit my bitwarden and port another account off gmail (my late new-years resolution is to port an account off gmail every time I get myself worked up about something google did -- funnel the useless frustration into something worthwhile.)
Gaslighting = post is visible to you, and unbeknownst to you, invisible to everyone else
To manipulate someone psychologically such that they question their own memory, perception and sanity, thereby evoking in them low self-esteem and cognitive dissonance. The verb sense derives from the 1938 stage play Gas Light, in which a husband attempts to convince his wife and others that she is insane by manipulating small elements of their environment.
in what way does hiding one's post cause them to "question their own memory, perception and sanity"?
I suspect a lot of people caught up in "shadow bans" already have a tenuous grip on reality in the first place. What a disgusting, mean spirited and wholly pointless thing for them to be engaged in. Why couldn't they just tell said individuals they've been auto moderated or banned? It's not like it will result in additional support being required - Google already make a point of ignoring their users.
Shadow banning is 100% a form of gas lighting, and IMO should be considered just as unethical. If you are going to ban someone, words, or actions be upfront and clear about the rules and bans
I have had hn accounts shadowbanned without explanation or opportunity for appeal (I did try and was ignored) and largely stopped participating here because of that.
That said, I'm sympathetic to the idea that in small communities admin time is at a premium and gaslighting, even if it's occasionally abused, is a force-multiplier that can make the difference between a community having enough moderation to survive vs spinning off into toxicity and turning into a ghost town.
What I object to is that it seems to increasingly be used as a "best practice," to be applied universally without weighing pros and cons, rather than as a shitty reality to be applied minimally. For instance, in the case of youtube, we can place a very low upper bound on the value they're getting out of this tool, because it's being used to enforce an automated blanket policy that everyone already knows about (certainly everyone intent on link spamming, in any case). HN's shadowbanning is going to be good or evil on a per-instance basis, which makes it difficult for me to judge, while youtube's shadowbanning (as it relates to enforcing obvious automated blanket policies) cannot be good and is therefore much easier to judge.
I had a Firefox plugin that would tweet all my bookmarks. Years later I noticed all the tweets were hidden from search
In 2010 I was able to have one number ring multiple phones, automatic transcription of voicemail, text people from a web browser (!), switch between network providers without having to deal with number porting, it was great.
What killed it for me was that MMS was silently dropped, no images, but worse group SMS was handled by MMS so if people added you to group chats you just wouldn't get any of the messages and they would have no indication that you weren't getting them.
This went unsolved for years.
Eventually iMessage, Signal, WhatsApp, Facebook - basically everyone else took this market. Then Google started some anemic work on it again, along the way making and killing a bunch of other chat products that all sucked in different ways.
Along with google plus and cloud, this is probably one of their biggest strategic failures.
It's pure incompetence.
Could you even summarize a piece of legislation that doesn't amount to "describe Google, then make everything that annoys us about Google illegal for companies fitting that description"?
In Standard Oil's case, vertical integration across markets was enough, and pretty much everyone in Big Tech is guilty of this.
The Human mind has an infinite capacity to justify any manner of things as "just doing my job" or "just following orders"
This has been seen in all industry, in all types of roles and at all times in history
There is nothing more dangerous than a group of people "just doing their jobs"
And even if they do understand your situation, and have authenticated you, and aren't just reading a script, then most of the time they can't offer you anything else besides what's possible on the website anyways. Sometimes we just like having someone to complain to.
Also, I bet no one think all will be well, without KI, but it will be better dealing with incompetent, overworked and underpaid call workers, than dealing with a "smart" KI, with you cannot talk at all. In the first case there is at least the hope, that someone escalates the problem to someone with more knowledge who can finally solve your problem.
With Google's bot approach that can never happen. The only way to escalate issues is to be famous and write a blog post or tweet about it.
So every bad idea eventually gets implemented.
The real tragedy is that we decided to let corporations grow so big that they can say "fuck you" to courts and people alike with no repercussions. Twitter is famous for this, ever tried to appeal a ban?
This isn't about companies being too big, it's about an absence of rule making. If there were some rules defining the rights, then the courts could, indeed, be involved; but courts can't be brought into something just because it is "wrong". People agree to the ToS when they submit an app to the store; and the ToS more or less say, it's Gapplsoft's platform and they may do what they like.
In Germany, people and political parties have obtained court judgements to unlock their Twitter and FB accounts. Generally the principle behind these decisions was that Twitter and FB are a public venue for discourse and therefore it goes against free speech to ban accounts for acceptable speech.
The only downside is that it are mostly hardcore actual Nazis which obtain these rulings, e.g. from the NPD party: https://www.belltower.news/gerichtsstreit-facebook-muss-seit...
It is unlikely that any common law jurisdiction would apply freedom of speech so broadly but it is uncertain. It could be that even Germany only applies it in cases where it is clearly a matter of political speech. How broadly do you think this precedent applies?
I know there are benefits to having someone vet browser extensions, but it seems a shame that they remove the self-distribution option completely when their moderation is so ineffectual.
Slowly but surely, the people handover their rights and are shocked by the power the dictator "suddenly has."
When the chrome team was tightening their grips on chrome, people here hailed the move because some windows programs like anti-viruses, download managers and adware sideloaded extensions.
We do keep giving power to some system because they "protect us" (Google and Apple in 2010) but there's always a chance that they'll stop caring once they don't need your support anymore.
Microsoft is also trying to buy our support by being benevolent, I wonder how long and if that will last.
Then extensions started being a spyware / malware delivery mechanism, with popular ones being bought and turned overnight. Coupled with browser plugins shoved down on the user's throat by various Windows software, this made Firefox unusable, at least on Windows.
It's why back in 2010 I started recommending Chrome to family, because Chrome installations kept being clean. It's why we can't have nice things.
Yep, Google is certainly protecting us from companies that do that.
Will these individuals continue to be putting Good Ideas into production indefinitely or is there some sort of immune response inside Google?
I have no interest in a scape goat or anything like that, I'm just curious if there's a way to incorporate the real-world consequences of choices like this into who is empowered to make choices going forward.
In a tiny company, a large failure can easily be the end of the company, so they're far more motivated to care about things like customer happiness, etc.
This story is about infra, but it applies just as much for product.
It's pleasant to think that that's actually happening somewhere. Usually it's probably more like Google+ (gosh, we did everything right, but somehow it just didn't work out--oh well, it wasn't that much money after all, and hey, we can keep using it internally).
The VP made a boatload in a bonus for outsourcing a major group with expensive Seattle engineers and offshoring it. Then the company paid millions to the FCC in fines for the fuck up. He kept his job.
Saw this cycle repeated all over, VP replacing expensive hundreds of millions in telecom equipment then go working for that vendor as a VP for them cough nortel cough...
Shit kept moving along, saw VP's back in the day push for the expensive per minute charges on low income phones while allowing the cheapest rates or inclusive long distance for normal users. The costs to keep the extra expensive billing and bad press of gouging the poor was ignored util it made the news. Shrug, change policy, nothing to see here.
Google is losing Joe Rogan due to censorship, while Google is running off their most watched creators due to guest censorship. Theres even people making plugins to get around googles censorship (msm channel blacklist, pockettube, etc).
The whole control angle of companies strangles customers and developers to create new platforms, bad mangament is a great opportunity for startups to take on these issues and grow into major companies. Spotify is just the modern day Napster. Bitchute is a wayward home for censored conversations. Paypal decided to ban people for politics and now dozens of companies are biting into their market, Square/Stripe etc.
People are tired of being controlled by FANNG companies, nextdoor took off due to facebook, companies are trying to keep the afloat with the largest consumer base, but once the market is shattered with fleeing/banned users and customers, new companies will pop up. Myspace tried to control the market, facebook took over, now facebook controls what you see in your feed, and people flee, so facebook buys up the startups people flee too.
Tiny companies fill the need, we just need to make sure they get funded to continue and grow, crowd sourcing is one area that helps.
I'm loving that hackers and programmers who hate being told what to do and how to act, are coding and design ways around this problem. Chrome extensions is a good idea, but soon google will ban them, Dissenter as an example. When chrome is too controlling people flee to the next browser. Look at how many browsers there are now doing what Google is lacking.
I cant wait to see what people build to rebel against "the system", and theres now methods to fund them, the future looks great. Everyone keeps talking about the same issues, as if its an accepted fact, then someone comes along and builds a platform/app/extension that fixes it.
And people move on...
Like, if you were a former Googler or someone who'd been through their customer-support wringer, and you had some contacts, you could set yourself up as a consultant for small-scale Google account holders who run into this. Charge a fee for access to your higher-tier contacts, maybe even sell "Google insurance", a group of small devs could pool some money to pay for access to Google support when the hammer randomly falls on one of them.
This idea brought to you by my experience with various government bureaucracies, which are nominally publicly accessible, but, due to under-staffing and high demand for services, are more productively approached through the right kind of lawyer.
There are organisations that already work like this in many countries of the world. That's usually what we want to get away from.
New hotness: Google unexpectedly cancelling other peoples' products.
I wonder what both AWS and Azure have that google does not???
We had similar issues with the Google Play store for the ArtStation App (https://magazine.artstation.com/2018/12/happened-artstation-...), it simply got taken down and appealing continually got rejected. It was only after the issue got picked up as the top story on Hacker News and other sites that exposed the dysfunctional nature of their moderation that finally Google subtly changed their policy so that if the content is primarily “artistic” it’s allowed, but the catch is that only they deem what is appropriate and not...
We recently updated our Chrome extension also and it just seems to me that not a whole lot of effort is going into the Chrome Web Store, at least on the developer side where you update the extensions.
I hate regulations but I am of opnion that if you are a platform that other people use to make living then you should be regulated. Don't be platform of you cannot provide processes to handle appeals or able to pay massive damages in case of false positives.
For now, I will stick with webdev.
This is also so terribly common. I had a Twitter account get suspended for 2 months...with no explanation. I appealed it but it still took 2 months. What if that had been my main source of revenue? They restored the account without much explanation.
We really need _real_ people to make decisions like this. Oh it's not scaleable? Then maybe it's not a product you can sustain.
I'm not saying that people who did are in the wrong, but yeah, don't do that. Likewise, it is very risky to have Youtube as a unique source of revenue, etc. Or even to diversify but across the same platform company/holding...
You should not take such critical dependencies even if they had real people doing proper reviews, because they can very well change their terms when they want, in unpredictable ways.
Same with me. If I lost my Twitter account, I could rebuild it -- my _actual_ following at the time had more to do with my blog and RSS (miss those days :( ); however, it shows that you can't really trust that an account is yours or that as long as you follow rules, you get to keep using the site. Or that you'll get a "fair trial" when you're accused of breaking rules.
It doesn't help that these companies also punish you for getting accused when they _do_ have manual review. One of my photos on FB got mistakenly flagged, reviewed and approved that it's fine, and I still had a 7-day ban from posting/commenting. Youtube has that 3 strikes rule or whatever where if you get accused 3 times or more of copyright infringement (even if false and retracted), you lose monetization.
I had the same problem with a Chrome extension for my side project Defero (school information system). It uses InboxSDK to integrate the Defero address book with GMail. Unfortunately, it got flagged for security review and it kept getting rejected no matter what I changed. I ended up concluding my authentication mechanism and/or my use of InboxSDK was causing problems so I'm going to try changing the authentication mechanism.
But working with the Google to try to get it fixed and finding the cryptic warnings they hide in various parts of the developer console has been extremely annoying. I don't blame you for your decision.
Amazon suspiciously says browser extension Honey is a security risk, now that PayPal owns it
https://www.theverge.com/2020/1/9/21059083/amazon-honey-brow...
I'm the person building it, so please let me know if you have any questions.
Thanks for the tag. Looks like the author's core issue is (understandably) with the construction of the system itself. I'm not sure what I can do here other than listen and reiterate that we are trying to work to address these issues.
- https://twitter.com/DotProto/status/1264331488029376513
A month ago he said:
For context, we're currently planning to create a team that will respond to escalations with more meaningful information about a rejection.
- https://groups.google.com/a/chromium.org/d/msg/chromium-exte...
But the situation only appears to be getting worse and no one at Google appears to care enough to do anything about it.
I have an extension that is once again in rejection form mail purgatory and it makes me want to take my extensions off of the Google Chrome Web Store as well.
There are only a handful of extensions that are deal breakers (the lack of which would send users to other browsers). uBlock Origin, for example. All the others can fuck right off.
1. When (not "if") Google kills UBO 2. How Chrome's market share doesn't drop
Adblock addons will be drastically limited in functionality, must bundle the block list with the addon, can't update the list outside of updating the addon, are limited to a fraction of the size of existing block lists.
This will end the arms race in favor of ads vs blockers by ensuring that ad blockers can't win while pretending its not ending adblocking.
With all that said- I still prefer Firefox and think it is the best choice right now for the Web.
People give shit to Jeff Bezos all the time, but compared to Google, there is no comparison to the level of company-wide user hostility and blatant privacy violations with such little public accountability, as that of Google's.
> "Google's Chrome Extension team has been giving me a complete nightmare since last two years."
What if the extension violated some policy that he either overlooked or is not publicly stated?
I would guess there's something in this extension that looks very similar to suspicious activity (regardless of whether it is) and some light refactoring would resolve the issue of repeated flagging.
Not suggesting this is right or good, but it's probably less time consuming and more effective than emailing back and forth for two years.
With the new Edge supporting Chrome Extensions, I wonder if some of these devs are going to move their extensions over to that or do like Kosmos and just move on to some other project that is outside the reach of Google.
All in all it is sad to see Kosmos go, I used it back in 2017 and really liked it. I didn't make the jump to the paid version but it was a well put together extension and solved a problem I think many users have.
If you MITM your own browser you can do whatever you want without an extension (that's almost a hostage to browser makers.)
I feel Google, Facebook and Twitter need to take a big step back and stop antagonizing paying users: be it developers or advertisers. A majority of the issues stem from horribly strict enforcement of policies. What these sites expect from us mere mortals is to do a tightrope walk every time we create and launch something. And some of these policies are actually ridiculous. I understand the fallout of Cambridge Analytica has caused all these sites to give more importance to policy enforcement but the solution to that problem does not lie in automating it through use of technology alone. Business and people's livelihood depend on these policy enforcement. God forbid your business Ad account is shutdown for good because you used a word that causes some stupid algorithm somewhere trigger an automatic ban.
It has happened to me. And worst part is you have no recourse. I have spoken directly with Google Execs who were assigned to a client of mine for managing a big ad account. Even they were clueless as to why the system suspended the account. After a lot of digging around I realized that it was because I had used the same credit card in two different accounts. I mean really? Come on! I am lucky I had a Google Exec who was in contact with me because the client was high value. What would small businesses be going through if the same thing happened to them? I shudder to think.
All these sites need to relax with their enforcement of policies. Deploy humans for this. We already have a lot of unemployment due to this pandemic and this would be a great time to payback some of those profits by employing more support staff. AI is good but it is not good enough yet to have such levels of control.
</rant>
I've been reading these stories for as long as I can remember knowing about HN. People don't seem to quite learn that Google is a machine for printing money and unless you're paying them they don't care.
That might sound like a non sequitur but it's ridiculous to me how little Google cares about anyone (users or the people who make content for their platforms) yet we still use their products. These days I try to avoid them wherever possible, not only for a small satisfaction of boycotting the company, but also because if I grow to like one of their products it will just shut down eventually.
What can we do about this?
I can't risk having a corporate rollout/demo/pilot fail because some developer made the Googlebot pissy and got everything they're associated with banned.
I trust Microsoft way more than Google at this point. That says something.
But that is way different than Embrace, Extend, Extinguish from MS. I would not trade, say, Chrome for the world of IE. the tension between Google and Apple is far healthier for developers and consumers.
I've had the exact opposite observation here. There are few places on the Internet I see Google get more consistently browbeaten and held to account for its mistakes and abuses than on HN. This has been the case for at least the past six or eight years or more. Threads on Google here are very rarely laudatory; they typically make the front page because of bad things.
HN comments tilt toward overwhelmingly disliking Goliath and favoring David. You see this in most Intel v AMD threads from the past decade. You'd think Intel killed HN's favorite puppy or merged with Oracle. Intel having an inferior product now doesn't explain the visceral response, it's something deeper psychologically, it's a revulsion of big tech broadly. It's mostly just a matter of rooting for the underdog and against big tech. The same thing is common re Amazon and Facebook here (increasingly Apple as well, which has lost a lot of its favor on HN). Microsoft is slightly in favor by contrast, they took a very long big tech lashing previously and people like a comeback story (their open source olive branches help a lot).
Pretty typical, forever repeating psychology. Underdogs, comebacks, goliaths v davids. They won't like you again until after you fall.
To be fair, Intel engaged in some really evil practices to prevent AMD from gaining market share for a very long time. And, unlike Microsoft's slap on the wrist, Intel never really got punished at all for it.
Yeah, Intel isn't as bad as Oracle simply because they don't have Larry Ellison. However, Darth Vader isn't magically good simply because he's not The Emperor.
Yeah, the fact that once "the davids" of the past became today's goliaths changed their behavior from (at least pretending to) caring about being social net-positive forces to being purely business machines has nothing to do with it.
For instance, Google's code of lost this paragraph two years ago [1]:
> “Don’t be evil.” Googlers generally apply those words to how we serve our users. But “Don’t be evil” is much more than that. Yes, it’s about providing our users unbiased access to information, focusing on their needs and giving them the best products and services that we can. But it’s also about doing the right thing more generally – following the law, acting honorably, and treating co-workers with courtesy and respect.
It may not matter to you but it does for some others. I'm one of them.
[1] https://gizmodo.com/google-removes-nearly-all-mentions-of-do...
> What can we do about this?
I think you've already got it; don't use Google products. Ideally, pay for alternatives.
I suppose it depends on how you count, but Fastmail seems like a good example.
Purchase software from other providers. With like, cash.
There is a much harsher solution that I'm not even sure I advocate yet: stigmatize employment there.
At-will employment somewhere when we can easily go elsewhere means that, while we don't necessarily condone all that our company does, we in general support/accept the company and its approach. Therefore, absent hardships, we must assume Google employees generally support Google actions as a whole (even if not this one). If others disapprove of Google's actions as a whole, they are allowed to disapprove of those that work there.
In my opinion, the best you can do is disapprove of working there (including passing opinionated judgment, albeit politely, on those that do work there). Maybe you take such character judgments in your personal or hiring decisions. Having said that, I don't agree with it as I generally support Google's actions/presence as a whole, but the further their average lowers, the more myself and others won't.
The truth is that it is become an enormous company and somebody working e.g. on the internals of Compose code has no power over how Chrome handles extensions.
I despise Google more and more as a company but that's not going to affect them.
In the areas where Google has some real alternatives, switch to these.
Not sure if this is yours, but mine was that it would often swap out my tracks for radio edits, even though I uploaded the original. I'm an adult, I bought this music, I don't need the kids' version. There's a built in feature you can use, "fix incorrect match," that would fix this only about half the time.
Oh right, it also capped the max size of playlists to 1000 songs for some reason.
Now it sounds like YouTube Music won't even let me listen while switching to another app, like a workout app, and won't let you turn off the screen without the music going out. Hard to believe.
Looking around, I'll be moving to musicolet I guess. Sounds like AIMP and BlackPlayer get good reviews too, but I really love the idea of an app that actually tries to limit the permissions it requests from you.
https://www.androidauthority.com/best-music-players-android-...
As for YouTube Music, it supports background play only if you subscribe, like regular YouTube.
It was like a revelation.
No longer were we tied to inflexible, command-and-conquer style platforms. We could fix bugs ourselves, instead of waiting for years for vendors to maybe fix the bugs we diligently reported.
We could distribute our own libraries and packages in minutes, with licenses of our own choice. There was no corporate gatekeeper standing in the way. (But what of security, you ask? Look at Lenovo and Superfish ... that was a MITM attack produced by the supposed gatekeepers).
Now it seems things have come full circle, and a younger generation of developers is discovering, once again, that writing software for closed, proprietary systems is a mug's game.
Only now, those platforms seem even more strongly entrenched, courtesy the mobile duopoly and web monopoly.
Seems like after doing this 2 or 3 times, I'd be making plans for a pivot or change to my business model.
Google is just an instance of the class. All of the instances of the class are subject to this problem. Fixing Google’s policies will not eliminate this danger.
Censorship platforms that do not permit the user an escape hatch (iOS App Store, I’m looking at you) are ultimately able to decide what we see, what we read, what we are allowed to think. They can disappear entire bodies of work without even a notification.
Do not use censorship platforms.
Instead of Kozmos shutting down, the best revenge would making a firefox extension and getting their users to switch.
I have been working on an extension that uses Chrome's Debugger API, lots of tab / network related APIs, and DevTools. I spun it up on Edge the other day and...it just worked. Everything worked.
I can't say the same for firefox. They do a good job bringing over some extension APIs, but I find it severely lacking for my use case.
While I generally agree with the reasons behind moving away from XPI extensions, it's been really disappointing to see Firefox not be as focused as I'd hoped they'd be on restoring lost extension functionality. That's especially important in the context of Google fuckery like the OP.
Firefox and Chrome both don't let users install any add-on without their permission. Switching to Firefox ecosystem just means the leash is longer (and the protection is fake because of their automated signing portal).
The vast majority of people have forgotten that they aren't an email, webapp, cloud storage, or online translation provider. They are an advertising company. They use their products to steal your information. They aren't meant to help the user, because the user is not their customer. I'm sure you will get a real human employee if you are interested in buying ads from them.
Contrary to popular belief there are many companies that provide software besides google. Use them if you want a provider that might care about your problems. "It's not exactly the same as google ____" is not a valid excuse for not giving it an honest try.
But they are: all of these are paid services Google offers. Presumably if you pay you get a different level/kind of support?
https://www.quora.com/Does-Google-Docs-and-Drive-generate-an...
It's not unlikely that in this case they use the more traditional business model of having the free tier do the marketing for the premium option.
If those numbers are still anywhere near close, Google is an advertising company with some interesting side hustles. Just because Harley Davidson sell t-shirts, doesn't mean you'd describe them as anything other than a motorcycle company.
Granted, I'm not well-versed in looking at corporate financials, but the basic breakdown shown here [1] isn't terribly complex
[1] https://www.prnewswire.com/news-releases/harley-davidson-rep...
You did inspire me to go look up actual numbers for google though. Looking at FY Q4 - https://abc.xyz/investor/static/pdf/2019Q4_alphabet_earnings...
If I'm reading the first table correctly, the number for "google advertising" is the sum of all the lines above it, so that's the number I'll take. If we compare that against the bottom line, we get 82.3% for Q4, or 83.2% for FY19.
So either it's improving (from the viewpoint of someone with a distaste of the ad industry, at least), or I mis-remembered 2016's 86% - either way I can update or correct my claim.
I’ve been an enterprise customer of Googles services. When you have a problem simply finding the link, to the obscure dashboard login, to post an issue may take hours. I’m not even joking. Like Google is built to prevent you from using it discover useful support pages with contact information. “Account Executives” otherwise known as sales people, provide zero support after the contract is signed and I mean zero.
Once you write in, you wait, and hope. It’s kind of like filing a radar with Apple but a bit shittier because you have still idiotic, naive, hope you’ll get a reply or help.
If you ever do get a reply it’s likely a bot. If you ever have to disagree chances are it won’t be seen or acknowledged. Google is by far the worst service provider on the planet if you ever have an issue.
Seriously, I am slowly and surely de-googling, such as storing all data locally (if I need offsite, I use encrypted backups). My calendar now uses caldav on a raspberry pi, my home network uses ethernet for fast data flow to a portable drive and I am using a web browser for many applications such as email; I use noscript and nextdns to selectively control my browsing experience. SSH is powering everything, including being able to access the device from any client connected to the network and if I wanted, from the internet as well (which can be quite useful, needs to be done sensibly however).
It's possible, but it does require effort, staying power (when installing a python package doesn't quite work because python 2/3 still...sigh) and is, quite simply, not something the average home user cares about.
Do they care an enforcement agent can access your documents via a warrant? or your metadata? or access your 'social circle' or profile you? Honestly, not really. But my threat model is that Google can and will use their AI army against you, and if you are unfortunate enough to get caught by them, there's little regards to you as an individual.
I can't risk my data being in a service with such little regard to humans, it's not acceptable and frankly, hosting everything myself is safer, more rewarding from a learning experience (such as how linux works and certain design decisions that are both good/bad and can be frustrating).
go de-google, it's a worthwhile venture.
[P.S: in a previous life I was vastly pro google. I used location history for years, google pay, play store, play games, stored youtube history and the whole works. Thanks to Snowden and forums like reddit/hackernews, I learnt that this was foolish. Giving up my data, for free, in return for little value back (why give them my financial information, for what? Google Pay is no different to my contactless card and that goes to bank directly). Cutting all these data flows was refreshing, and is part of the plan to delete or make my account dormant altogether. I am vastly more pro-privacy and take strict measures to reduce my digital footprint, which is entirely possible but requires additional effort, where the temptation of letting the "nice guy" handle all the work is always there. Paying in cash is still a thing and leaves less of a trace to 'you' as a person than digital]
With more at home pandemic time I decided to just do it and have been super impressed. The Fastmail docs are really good, setting up DNS to use my custom domain had explicit steps and pictures for my specific provider (gandi.net) along with a ton of others.
They have super easy to setup import from Gmail to get things over initially and to keep things coming as you convert accounts.
They have really good instructions for all IMAP clients and it's been painless to set those up.
I did have to spend a day going through every account in 1Password and changing emails, but the super simple aliases you can setup in Fastmail make this great. I have a bunch of different ones for different types of sites (some very specific, some general catch-alls) on my domain which I can now blacklist in the future if I need to.
The main issue is that you realize a lot of sites are just terrible, many don't let you change your email at all and require contacting support. Some don't even let you change after contacting support (postmates just says to 'create a new account under your new email and abandon the old one').
In general though I'm happy I did it and the Fastmail site has been pretty impressive. I like paying for software I think is high quality and valuable (where the business and customer have aligned incentives).
I found the process of changing emails over meant I also was able to make Pass entries for them (another way I'm taking control of my data), and at the same time delete my account for websites I don't need anymore. It's been very cleansing.
Another thing I should mention is I wanted to try hey.com since it looks like they’re doing some interesting things (alerting users to tracking pixels to push back on clients like superhuman, whitelisting incoming mail, etc.) but they make it hard to get an invite so I gave up trying and paid for fastmail instead.
Also switched away from Google to Fastmail with my own domain about a year ago. Happy with the move, although Gmail still sees some activity because I never took the effort of migrating historic mails and all non-primary accounts.
It's a kind of shared hosting with full ssh (non-root) access. They offer a pre-installed Roundcube Webmailer, but you can host your own one as well.
I run my own Roundcube with my own Domain and configured a maildrop instance to sort incoming mails.
So far it works as a charm. The hoster is based in Germany and I trust them to be privacy-aware.
https://www.migadu.com/en/index.html
You pay based on traffic rather than per account/domain.
1. Set up both providers on an IMAP client that supports multiple simultaneous accounts.
2. Copy messages from the old provider to the new by simply selecting them in the old provider's folders in your IMAP client and dragging them to wherever you want them in the new provider's folders.
As long as you pick an IMAP client that supports copying between IMAP servers, this should do it. I used either Apple Mail or Outlook for this. I don't remember which.
True from a naively pedantic POV, but also ignores that betting odds happen to end up efficient also. Like saying shopkeeps set prices to drum up business and aren’t subject to the principles of supply and demand.
Google is an advertising company, but as part of its strategic goals it develops a high quality email client that beat out competitors on its own. I bet you the Gmail team is full of brilliant people who don’t give a shit about advertising and just want to make an awesome email client and spend night and day thinking about just that.
I have seen this first-hand. I bet you have too. A brilliant user friendly idea stays at the bottom of the product log, as middle and upper management product asks get piled on top of it, pushing it deeper and deeper.
Sure, I guess you could donate the small amount of free time you get to your employer and do it after work, but I can't think of anything more demotivating than working for free for a company with revenue in the hundreds of millions.
As long as someone understands the Faustian bargain and enters into it willingly, no problem. The difficulty is that it is unlikely most users really understand the details of the deal they are entering. "Hey, cool, free email." That's about the end of the thought process for most users. Google's approach is brilliant in its simplicity. "Free" stuff.
I mean they better give a shit about advertising because it’s what lets them have a job at Google.
I think this story is better told more simply, that when a company gets big it becomes arrogant, bad at social awareness and serving anybody. I'm sure you can find advertisers or would-be beneficiaries of what you call "data theft" that are fed up with Google breaking their stuff too.
They lost their way but keep riding their initial wave.
Everything else is a loss-leader or a rounding error.
This is all well and good, but they cornered the market for email, webapp, cloud storage and online translation products (and most importantly smartphones and web browsers). So until there is a viable alternative that the average person knows about, this will not change.
Bureaucracy and customer support problems with large companies is not a new or unique to Google.
That’s a fact. Speaking from personal experience, Google Ads/Admob seem to be the only services where human support exists.
Word of this got to our guy who handled ad buying. He called our ad rep with them, and asked pointedly "why the fuck am I spending $X thousand dollars a month to buy ads from you to get new customers, and then you are blocking those new customers from getting their receipts and support replies???".
The ad rep put our guy on hold for a minute, then came back and said he had their head of IT on conference. He asked the head of IT that question. The head of IT put us all on hold for a couple minutes, then came back with a couple engineers who worked on their email system on the line, and told them to whitelist us so that nothing of ours could be blocked as spam, and promised it would be done in something like half an hour.
It was, and we never had a problem there again.
They aren’t stealing from me. I get to watch YouTube videos, store my files in Drive, and use gmail — all things that I like quite a lot. Yes there are alternatives to gmail and Drive, none of which are good enough for the hassle of switching. There is no YouTube alternative.
More sinister than actually, "film you taking a shit and then sell it". As perverse as it sounds, but you won't even know it.
I actually got rejected from YC Summer 2019 with this idea. Demo Day would’ve been one to remember.
But if we are to accept the author’s central claim that it was reviewed and accepted by humans many times in these two years, the why isn’t really important. IMO it would just make the story more interesting, not critically different.
Now if you have reason to think that central claim is bullshit that’s another question.
PS: also in this types of automated triggers, getting to know what triggered the warnings is in itself a pretty hard task. I think a number of extensions just get removed without ever knowing exactly why it happened.
Let's hope that antitrust agencies will finally investigate them on this subject!
When you're on the receiving end, the actions of Google are indistinguishable from those of traditional bureaucracies except that instead of training people to follow scripts, they have bots that take care of things automatically.
Unfortunately for us humans, Google's model of automating the disregard seems sustainable and profitable.
But having said that, if you're considering switching you probably also want to consider telling your paid customers how to install your extension themselves, rather than sending them over to Google's extension "store".
THIS IS WHAT YOUR COMPANY DOES.
This among MANY other reasons is why people are pissed off with you.
When are you going to fix your toxic corporate culture?
Google briefly disabled my Google account last year, and it spooked me. I had created a "brand account" to use with YouTube, and for some reason the new account was flagged for suspension within the first day. I was annoyed, but it didn't bother me too much, and I submitted my appeal (aside: I always feel wonderful having no clue what I'm appealing - I'm pretty sure even the Soviet Union or Nazi Germany would have given me the dignity of knowing what I'd been convicted of before the trial + execution/Gulag). Two days later, I woke up to two emails from Google: the first indicating that my main Google account - the one where I have my email, several domain names and YouTube TV - had been suspended; the second indicating that the team reviewed my appeal and had found I hadn't violated any policies and my account had been reinstated, but that I'd need to login soon. I logged in posthaste and found that my brand account was still disabled, but at least I could read and backup my email. (At the time I also happened to be in salary negotiations with my then-client and now employer. Really wonderful timing.)
I tried to submit another appeal on the brand account suspension, explaining that I'd received a reinstatement email referencing the original ticket number, and that all their team had done was erroneously disable and reenable my main account. This time, I got a response saying that I already had an appeal pending so I'd need to wait for it to be resolved. If I really cared that much, I could have tried again to explain again that actually it was their mistake, yada yada, but it wasn't worth it. I didn't want my account to be suspended again with very little recourse other than trying to use my network to get something done internally. Like with a corrupt cop, the prudent strategy was to just walk away and avoid conversation.
I've since stopped using Chrome, and I find that I prefer DuckDuckGo to Google (DDG feels like Google Search used to before $GOOG started blindly trusting deep learning to solve everything). I have hardened my resolve against ever touching an Android device, and I use an adblocker zealously. I haven't fully moved my mail or DNS stuff away, but I am much more cautious. I didn't realize in 2004 when I signed up for Gmail that I'd be entrusting my life's records to an organization that makes the DMV look like an expert at efficiency and customer support.
I'd hope that OP and the various other developers here could maybe band together and maybe consult a lawyer. I have a feeling that given the legal realities of discrimination law and the like, Google's policies and enforcement procedures are bound to be in violation, especially considering the law in its home state. Google's behavior is not merely evil in these cases, but evil and incompetent.
Postmortem and lesson learned: Don't make yourself dependent on BIG_COMPANY when building a product
Specifically:
> no Stream/Epic store listing
There exist lots of stores: Epic, Steam, GOG, Humble Store, itch, ... So diversify the risks of being dependent on the whims of one or few of them.
> no cloud servers
Write your server-side applications in a way that does not depend too much on the specific details of the cloud implementation of a specific cloud provider so that you can rather easily switch to another cloud provider if necessary.
What I don't understand is why the GDPR doesn't enforce the following:
1: Clear and concise information about the action being taken, and clear identification this was done using automation and did not involve any human oversight.
2: A process the user can invoke to request human intervention, and a confirmation email that a human will review the decision that was made within 30 days
3: Public statistics and transparency - any decision that was made that did not involve a human must be published, with stats on % of decisions made, number of cases flagged to human reviewers, and the success/failure rates (for example, number of cases resulting in an overturned AI decision by a human).
This could also be beneficial in other sectors too, like automated credit decisions and insurance policies, to publish statistics and data to afford transparency and identify possible biases. It should also be a requirement in law to preserve any code or algorithms should they need to be audited, including an AI system to be preserved "in time", so that the 2017 version can be audited in 2020 if an investigation is launched for example.
Right now, it's a complete free for all, too many edge cases and ways to game the system if you can figure its loopholes, and no requirement in law to provide a fair basis for users to appeal to a human without causing a PR shitstorm.
This early adoption of AI is quite bad, and I suspect we'll see such developments in the long term future as it matures.
[1]: https://ico.org.uk/for-organisations/guide-to-data-protectio...
This Regulation lays down rules relating to the protection of natural persons with regard to the processing of personal data and rules relating to the free movement of personal data.
No snark, this situation sucks, but after dealing with GDPR for a while it's not well understood in tech societies
People look at historic court cases which defines future societal behavior (like acceptance of Gay marriage in some places).
It'll take time but get there eventually, and then we'll see changes based on that.
Every nightmare story about accounts being disabled by a bot, or Adsense payouts being canceled, or apps taken out of the App Store, or extensions being shutdown, all done by Google engineers or outsourced workers.
These Google people are doing it because they can and because they are jealous of others’ success. They are also doing it because Google has lost their way in the last few years and they are bored, among other reasons.
They also continually screw with web site search results to harm certain sites, individuals, and companies for much the same reasons as mentioned above.
Trust me when I tell you that there are no bots behind these final decisions. It’s being done by Google engineers and their outsourced workers.