Google refuses to reinstate account after man took medical images of son’s groin
theguardian.com
theguardian.com
Another version of this same story, also marked as a dupe: https://news.ycombinator.com/item?id=32557294
Imagine you do something like this in the near future. You are banned from all communications. Alpha corp. reports it to VISA corp. and all your money is confiscated. State can't help you as you do not have a way to communicate with it, don't have a way to start any legal process as you do not have a way to pay. All your daily subscriptions to housing, mobility, entertainment are cancelled and you are homeless the same day.
The only way for you to stay alive is to hike to lawless desert city of "Kowloon 2.1". You walk by the highways observing huge OLED billboards. They show presidential elections. This time it is some adult TV reality show star competing with tanned bodybuilder.
https://sweden.se/life/society/a-cashless-society
Where I am really not sure how to feel about it.
I'm living in Sweden, have no problems with a cashless society in theory, but that it's all in the hands of private corporations definitely makes me unhappy.
Meanwhile, for a business, either of these refusing to work with you will likely kill the business on the spot.
The differences between Europe and US corporatism is petty narcissism of small differences.
Maybe major chains. There are vast numbers of small-holder rentals that happily take cash.
> Meanwhile, for a business, either of these refusing to work with you will likely kill the business on the spot.
It's 100% possible to do business in Europe purely with bank transfer. I've been at it for years and I never interact with either Visa or Mastercard.
Yes, there are transactions that occur in cash, bank transfer & such. Fail to present a Visa/MC when you rent a car in Dublin or Brussels and you will be in for a surprise. In Dublin, standard practice is to compromise by making you pay a 5X rate... insurance or whatnot. Maybe there is a no-card option somewhere in the city, but it certainly isn't most places.
Yes, you can be an electrician or consultant without accepting cards. No, it is not practically possible to run a store or most customer facing businesses. Even most electricians and consultants accept or at least use cards.
There's no meaningful difference between Europe and the US. This is a powerful and hard to avoid duopoly.
This is totally tangential, but I would actually argue that denying someone access to their credit is not that different. Credit is what money is. Our European attitudes towards debt and credit is intensely responsible for our two tier system. Credit for the rich. Debit for the poor. Policy debate about where and how the border between these two should be.
Here in NL Apple Pay works fine with a lot of banks -- and they're still just Maestro cards.
I'll go out on a limb and assume that the standard fee structure does not afford wallet manufacturers a per-transaction fee.
Any statement about a "majority of the world" would need to apply to India, China, and the African continent to be true. In China being banned from Alipay or similar would presumably have the same or even worse effect. India's attempt to go cashless some years back disproportionately affected those without plastic or digital payment cards, further emphasizing the point.
I don't know too much about payment systems in Africa but my understanding is that mobile payment services have been heavily adopted and if a major payment corporation in the region banned an individual it would have a drastic negative effect on their livelihood. If corporate-issued payment devices are easy to do without in Europe it would seem to be the exception, not the rule.
Denmark and probably other Scandinavian countries almost never deal with cash any more. Everything is by card (Visa) or MobilePay (an app connected to your card)
If the card would stop working you would have a hard time.
Cards issued by banks will often combine BankAxept and Visa/MC on the same card, so that users don't need a separate Visa card. The terminal will switch to BankAxept if available automatically. This is done transparently, so there are no issues with using it as a Visa card outside Norway.
https://eur-lex.europa.eu/EN/legal-content/summary/fees-for-...
Every once in a while some pensioner organisation or so starts a debate about them not understanding how to pay their bills via an app and that they can't shop at some stores/restaurants only taking payments via an app (Swish). Some seniors might not have a smartphone or are unable to use it.
But the real and much bigger issue is what happens in case of a crisis. Like a huge power outage or the rolling blackouts that might come this winter depending on how the power situation develops in Europe. Or in case of natural disaster or war. We have historically had a very stable power grid and society so most people don't even think about what they would do if their digital payment methods just stopped working. I don't think it benefits our society that we are unable to make payments without technology.
In 1-2 years we will have instant IBAN payments, I wonder how long until there is a fee for that as well which is currently free just takes a day.
> Member States shall ensure that credit institutions refuse an application for a payment account with basic features where opening such an account would result in an infringement of the provisions on the prevention of money laundering and the countering of terrorist financing laid down in Directive 2005/60/EC.
https://eur-lex.europa.eu/legal-content/EN/TXT/?uri=CELEX:32...
- https://www.cnbc.com/2022/08/02/bill-ackman-blasts-visa-sayi... - https://thehill.com/policy/technology/548279-mastercard-upda...
Getting deplatform by payment processors is existential. Also, of note, they are just the front door to a banking system that is generally necessary for commerce and yet under similar pressure to police:
- https://www.marijuanamoment.net/marijuana-banking-reform-wil... - https://www.aba.com/advocacy/our-issues/cannabis
Perhaps nether is as salient as the news cycles devoted to SWIFT and the norming power that exclusion form it was sure to demonstrate.
- https://www.bbc.com/news/business-60521822
(Specific links are arbitrary pointers into the issues referenced)
Quite hard to imagine for me. Corporations don't have an ideological framework underneath ("we the people..."), so they are going to get overpowered any time push comes to shove.
Congress fed up with how corporation treats citizens? Some unions?
The only thing I could imagine is the other corporation. Not much more.
To organise the world's information and make it universally accessible and useful - Google
To enhance the lives of our people, members, customers, and the communities in which we trade - Co-op group
Give people the power to build community and bring the world closer together - Facebook
To support national and international security policies that protect those who are defenseless and provide a free voice for all with a dedication to providing ethical, efficient, and effective turnkey solutions that positively impact the lives of those still caught in desperate times - Blackwater
I would argue all of the (along with the generic maximizing shareholders value obviously.) are concrete expressions of specific underlying ideologies. Roughly speaking these are that information should be universally accessible, corporations should benefit not just their shareholders, the world would be better if we were all one big family (very dubious!), and being a mercenary is fine as long as you're an "ethical" mercenary, whatever that means.
That we often don't see these as ideologically motivated statements is just because they are all, to a greater or lesser extent, in line with the dominant ideologies of our time, capitalism and liberal democracy.
What we're seeing here is symbiosis, not competition. Google empowers (overpowers) the state and the state empowers Google. It's state action that required and legitimised automated & invasive "crime detection," while requiring and legitimising underlying the underlying data collection and privacy invasion that forms a pillar of Google's ad business.
Google's lobbying and advisory efforts, and their position as a big competent partner empowers the state. When citizens lobby them to "do something" to protect children, they go to Google to borrow their power.
"Centralisation" is too zeitgeist and has the wrong connotation, but it's close. "Convergence" is probably a better term. Actual tensions between State(s), Google and say Apple are minor compared to symbiotic reinforcement.
We're seeing one small element of Google-powered policing here. The totality is likely much broader, and law enforcement is and will be very dependant on this. Apple make more (at a 100% profit margin) selling Google their defaults than they (or anyone) could possibly make competing.
So it is not a symbiosis per se but rather complete overtake of host (State).
State becoming irrelevant makes politics a reality show.
Though you could say that protectionism benefits a lot of companies, but a decrease in it would benefit more (and bigger ones).
It's really obviously symbiotic if you look at any level of detail.
Old leftists see it as corporations taking over the state. Conservatives see it as the state taking over corporations. Meanwhile, it's extremely obvious that both are complicit and that they grow to rely on each other in quickly inextricable ways.
This article is about Google doing police work: surveillance, analysis, investigation. It is only one example, a detail within a larger framework. Now, privacy focused competition represents an interference with critical police work.
Meanwhile, Google is highly involved in drafting legislative detail about how copyright is implemented. How liability for platform usage is implemented. Etc.
The state is not irrelevant at all. Politics might be a reality TV show, but that's always been the case.
But this is false. Corporations are and always will be exclusively answerable to their shareholders. Whereas the state can have any loyalty depending on who is controlling it
Shareholders are pretty happy under a system in which the corporation benefits from tax breaks and loopholes, fat government contracts, favorable legal environments, carve-outs for regulation exemptions, regulations that make entry into existing markets prohibitively expensive, etc.
Voting with dollars works with corps so they are self correcting, in the sense of they want to keep their customer base. But what happens when someone is poor enough to not be their customer? Or they are rich enough to overlook discriminatory behavior of their employees?
In the end invisible hand of capitalism sorts out corporations. But OPs example of a ruined life is totally possible. Yes, state can be more powerful but by the time it reacts, it might be too late.
And it is no more likely to cater for small minorities than a corporation; it just claims it will. If there's political will then it might happen, just as businesses are started to cater for emerging markets. But there's no guarantee.
It does not. This is a silly myth.
It works in the sense that if people don't buy, companies change. There has almost never been a "consumer action" that organised to influence companies in any significant way. It just doesn't work IRL.
Nonsense. As a prominent example in tech, Microsoft has become a very different company thanks to seeing their customer base eroding under their old ways. They had to shape up to remain relevant, and I'd say did a decent job of doing so.
As a farmer, the market voted that they want non-GMO soybeans for food consumption, and now that makes the biggest crop grown on my farm. GMO soys would be a lot easier, but I am ultimately beholden to what the customer will pay for. If I don't grow them my neighbour will and with his profits he'll improve his overall efficiency until I can no longer compete with any crop.
Voting with your wallet works just fine. But that, of course, does not mean your vote will win. Like in governmental elections, just because you believe in something doesn't mean anyone else does.
Consumer action doesn't mean that. It means some sort of organised campaign to influence companies/industries by boycotting products or otherwise "voting with dollars. These campaigns never succeed directly.
It fails when most people are apathetic to or disagree with the message, sure. That's the nature of voting. You won't always win. You might never win.
Google (and other tech monopolies) do not have readily available substitutes. Network effects and such funnel usage. Most users don't know policies, nor understand their implications if they are.
I think it's extremely disingenuous, at this point to argue that AMZN, MSFT, GOOG or whatnot are merely a popular consumer choice. In any case, you accept the outcome of elections in a democracy, or maybe even a sports league committee. "Voting" with dollars is an analogy. The people affected often aren't even google's customers. The actual dollars come from elsewhere. In conventional, industrial terms, most users are a resource being transformed into a product with technology. For example, Apple receives money for setting users defaults to Google. Google receives money for advertising to these users. There is no "sour grapes, move on" here. No actual election to adhere to.
Whatever about theoretical voting with dollars, we all know how "voting with votes" would turn out.
You wonder sometimes, the things they say. Perhaps it is more accurate to say that they have an active interest in food? Which goes to show that when people want something to change, they'll take an interest and make change happen. If they are content with the way things are and vote for the status quo, that's their vote to make. Just because you didn't get your way with your inane pet ideas doesn't mean voting doesn't work.
> Google (and other tech monopolies) do not have readily available substitutes.
TV, radio, billboards, flyers... There are all kinds of substitutes. Some of which can command a lot of money from their customers because of them providing a proven valuable service. Google and the like may be the best in the biz, but there are a lot of other choices which are quite viable substitutes.
Google even suffered through the "adpocalypse", a period when customers did flee when they weren't happy with what Google was doing. We don't have to invent hypotheticals. It literally happened to them and it forced them to change things about their business to start to win customers back.
Voting works. That doesn't mean you will win.
If you think Google, amzn, msft or whatnot exist in a competitive marketplace like restaurants and refrigerators.... it's just foolish.
Adpocalypse was not something that happened to google. It was something Google did to it's vendors, content producers. Google just found a way to increase revenue. They are a monopsony in regards to content producers. So, they get to present a take-it-or-go-be-a-dentist proposition.
In any case, there is no "vote." Actual voting would turn out very differently.
It may not be competitive, but they are also pretty easy to walk away from. I've never been a customer of Google's, and haven't purchased anything from Amazon or Microsoft in many years. What do you really need from them? Not like what would be nice to have, but what do you really need? If you are buying from them it is because you like what they have to offer and are voting for it to continue.
I have no doubt indirectly purchased things from all of those companies and I'm okay with my vote landing that way because the product offered was exactly what I wanted. If it wasn't what I wanted, why would I buy it? That would be silly. I could easily exert pressure on the vendors I do buy from to stop buying from the above if there was a problem. They don't offer anything I truly need either.
That, of course, doesn't mean I'll win if I change my vote. If the problem is only in my mind, nobody else is going to care and the vote will land in their favour, not mine. Voting isn't about an individual. That is where it seems you are confused.
> It was something Google did to it's vendors
The changes Google had to make ultimately impacted its vendors, just as any business changing their ways no doubt impacts its vendors. My transition to non-GMO soybeans in response to consumer demand meant I was no longer buying the equivalent seed from GMO seed vendors. However, the situation all started because Google's product was no longer pleasing to the customers, which prompted the customers to stop being Google's customers until they changed their ways.
> In any case, there is no "vote."
Indeed, there is a vote. You can vote yes (spend your dollar) or you can vote no (do not spend your dollar). The entire public, even children, are eligible participants in the election... Unless they've been voted out, in which case they need to change their ways to be voted back in.
That doesn't mean your choice will win, of course. Voting is not about the individual.
Even if you manage to avoid paying them.... good luck avoiding using their sites, sites hosted by them, or collecting data for them. Good luck avoiding their payment systems, communication platforms, etc. This isn't like avoiding Mcdonalds. You need to be on John Galt's mountaintop to avoid these monopolies.
Sticking to a narrative where Google's monopoly/monopsony represents free choices between free people is idiotic.
I'm not going back to the voting thing again. It's beyond stupid.
So be it. If we were talking about a governmental election, and "your team" lost, you would also have to disappear to the mountains if you wanted to avoid having to interface with the elected government that doesn't represent your interests. More likely you'll just suck up the loss. That's what elections entail... They are not about the individual.
> Sticking to a narrative where Google's monopoly/monopsony represents free choices between free people is idiotic.
In reality, Google wouldn't last long if a large swath had a problem with them. The fact of the matter is that they offer a compelling product that many people want to use. You might not want to, but your minority position means that you've lost the election. Suck it up or move to the mountains, I guess, because the vote isn't about you as an individual.
Monopolies of this sort can be problematic in that they can cause people to become blind to alternatives. If what Google offers is good enough, you're not compelled to look elsewhere. And when everyone has settled on the same good enough, there isn't someone else in your ear saying "You should check out X! It is even better than Google." This keeps the votes coming in for the incumbent.
But if Google were to become no longer good enough, people will quickly start to look for X and vote for something else. Google already had exactly that happen when they were coupling their product with "unsavoury" content, which scared away customers who didn't want to be associated with such content. They had to change their policy to win back the votes.
Voting works. That doesn't mean you will win.
If that were a universal rule, the Renaissance and the Enlightenment could never have happened the way they did.
The real problem, IMO, is best described as "public power in private hands."
Those idiots will take themselves down sooner or later.
Yeah, this is horrific, but it's what people are willingly subjecting themselves to.
If you don't rely on these systems you aren't subject to them.
Other similarities might be market share, i.e. EIC controlled 50% of world trade at its height [1] vs Google's Search being used by 52% of the world in 2019 [2].
That all said, I'm squinting a bit to see this. Unlike Company rule in India [3] where one had little recourse as a subject if the EIC ruled against you; if Google rules against you then you can move to some other provider (of which there are many).
It's still fun to think of these analogies. I was always fascinated by the mega corporation, OCP, in Robocop that sought to privatise large US cities like Detroit [4].
[1] https://en.wikipedia.org/wiki/East_India_Company [2] https://review42.com/resources/google-statistics-and-facts/ [3] https://en.wikipedia.org/wiki/Company_rule_in_India [4] https://robocop.fandom.com/wiki/Omni_Consumer_Products
I totally disagree. Early EIC/VOC rule was lawless. Or rather, the EIC was literally sovereign. They ruled colonies in the same way that monarchies, democracies and whatnot rule. 17th century royal charters devolved power to these companies like they devolved power to colonial governorships or other bodies.
The early EIC is more comparable to the Colony of Virginia, which itself started as the Virginia Company. All technically ruled under a royal charter, but were practically sovereign within their domains.
Later EIC rule was more similar to modern corporate examples. Rule of Law was ostensibly introduced, and you could (in theory) take your grievances to civil authorities. In some ways, this starts to become similar to modern examples of corporatism. The EIC was still extremely big, rich and powerful. But in this later period, state power and state coffers interweaved
Later, British state rule.
Do you realize how ridiculous putting “number of people using for search” and all of “world trade” in the same comparison is? Google’s 200-300 billion annual revenue is barely 1% of the US GDP.
For a size comparison, you would need to throw all of the FAANGs together, some energy companies, and some banks to reach the inflation adjusted market cap of the Dutch East India trading company: https://dutchreview.com/culture/history/how-rich-was-the-dut...
It amusing on how having a little fun with a comment on dystopian cyberpunk can ruffle so many feathers :-p
And this would be the best thing that ever happened to you.
further discussion on the original NYT story here: https://news.ycombinator.com/item?id=32538805
Once you reach the scale and importance of these services, it shouldn’t be legal to lock people out like this.
Playing devil’s advocate, possession of CP is criminal with absolute liability [1]. Deleting someone’s account, far from it. (Civil. Maybe.)
Weighing someone who might have CP, even to an absurdly low probability, against them being suing and like two people deleting their Gmail accounts, I can see how someone chose the former. If they got the call wrong, Google would not only be liable for damages, the individuals involved could be criminally charged.
I’m assuming everyone in this chain would appreciate laws clarifying an email bill of rights. On the other hand, Google made their bed with its surveillance-first culture.
So how come this has never happened?
Google and Facebook have existed for decades, and so has CP, they didn't have automatic detection untill decently and yet none of their employees have ever been charged.
There is no good excuse for this kind of spying apparatus, period. If anything, having a mandated formal process for reinstating banned accounts will make the scanning more acceptable, which it shouldn't be. "You see, yes, we're regularly checking out your dick pics but it's all good, we have a process in place and if we tag an image as CP, when it's not, you'll eventually be exonerated. No harm done"
> If anything, having a mandated formal process for reinstating banned accounts will make the scanning more acceptable, which it shouldn't be.
We should fight first for a proper legal recourse, and once this happens, then we can also fight for no scanning.
It does not matter, because we don't have any fight left in us at all..
I'm more than prepared to just stop working for a few days or even a week or two.
I already actively boycott Chinese products where possible (I buy non Chinese if at all possible, even at significant higher prices), support the Georgian Legion with my own cash and have probably spent hundreds of hours on unpaid online activism this half year on top of what I do for my church (although in all fairness it still does more for me).
If enough people band together and just plain stop working, sooner or later politicians will have to listen.
This can't keep going on like this. To somebody like Google, an account might just be a profit source, but to the affected people it can be their lives or livelihood.
The issue of right of redress really needs to be forced, legislatively.
This might go against some people's idea of a free market. I think it should only apply where there isn't a free market - when a customer doesn't have many other options, such as in the case of Google or Apple, or Visa/Mastercard, a major supermarket, or the choice of cellphone provider or Internet provider in markets where there are only a few options. It wouldn't apply to small independent traders by definition.
Capture enough of the market where there isn't enough competition and you get obligations to treat them fairly.
Can one invoke EU rights, or is it tied to being physically resident like a DVD region?
What if the EU citizen flies to Europe? Can they then invoke their right from the physical territory of Europe?
I feel this is somewhat uncharted water.
- We would allow people to upload files
- these files would go into a 'holding tank'
- the files would then get greenlit if some rudimentary algorithm determined they were landscapes or other innocent content
- the remainder would be flagged for review
- bulk images would be displayed in a grid of 8x8 thumbnails
- the vast majority of those would not be reason for further action and would be greenlit, the remainder would go into yet another holding tank
- now the pictures would be viewed full size, any kind of image that would be against the TOS would be rejected and a hash would be kept to avoid seeing it again
- any kind of image that was deemed illegal or borderline would be passed on to LEO for another decision, possibly resulting in criminal charges against the uploader.
The complications:
- uploaders would try to mask their identity
- uploaders would be all over the world
- even after reviewing LEO would sometimes indicate that an image was inconclusive (in those cases we erred on the side of caution)
--
In short: companies can and do work together with law enforcement to stop service abuse and illegal activities. Whether it is an AI that flags it or a human is from a legal perspective utterly immaterial, and if LEO clears it that definitely means that you are allowed to either view it or pass it on.
Surely your reviewers never deliberately looked at the material a second time after marking it as abuse material for law enforcement, as that would be legally risky I would think.
The issue here is even if local LEO clear it, the federal prosecutor's opinion can differ and he can use the fact you knew AI flagged it and that you released it anyway to damn you. There are cases out there where local/state government cleared someone of wrong-doing but they still got hemmed up federally.
https://news.ycombinator.com/item?id=32178108#32178137
The biggest worry about these kind of situations is not that mistakes are made, but that it's almost impossible to make contact with a real human being to put things right [even, as in this case, when press and police are involved]. It's only a matter of time before someone loses their livelihood or even their life over this kind of cock-up.
How about "oh, everyone says we are wrong click to unban"?
Not even "everyone".
How about "law enforcement that we reported it to says we are wrong"?
cmiiw
Google can use the defense that somewhere in the TOS it probably says you agree to share everything with them when it goes to cloud storage.
HIPAA doesn't prohibit people from sharing info about themselves (even accidentally). Though it does probibits your doctor from putting photos like this near Google anything.
The "blue check fix" minimizes negative publicity while doing nothing for 99% of people. If a bad policy is consistently applied, at least it can be understood and criticised.
Therefore, this account and all the data contained is already gone. The most they could do is allow him to create a new account with the same name, but to my knowledge that isn't supported technically in their systems (too many bugs to be found by re-using unique identifiers).
That's why they stand by their decision - they don't have the capability to implement any other option.
In this case, they actually satisfy the two requirements:
1. "ongoing legitimate interest". They are still in a dispute with the customer. Deactivating an account does not require deleting data, so long as the case it not closed. There is no "30 day" limit in this case, and it seems like an arbitrary time period imposed by someone who hasn't thought of the consequences.
2. "users permission". In this case they do have the user permission to keep the content, because the user wants to keep access to the account.
> they don't have the capability to implement any other option.
As mentioned above, you can deactivate an account without also deleting it. It may of course be easier for Google to just delete it instead of introducing a new state, but I would argue that a company such as Google does have the capability to implement this option. I would go so far as to say this is a failure of Google to not have such a process in place.
That works both ways - as well as not being able to get the customers permission to keep the data, they also would not be able to get the customers request to delete the data if they were to keep it 'just in case'.
Until they have built some functionality to communicate with the customer behind a suspended account, they have to delete the data within 30 days.
For example, if the login requires a password and SMS 2fa, but the SMS is to a Google Fi phone number, then you're going to have to also enable the Google Fi account for that user to be able to login. Or what if they need to use email password resets to another suspended account? (remember you will probably suspend all accounts of a user at once if you suspect something illegal).
Making a special 'chat' tool inside the login flow that only requires a single factor (the account password) which allows presenting evidence to a google rep seems like the obvious solution (or requesting the account suspension be delayed, or that the data be deleted).
Building and staffing that sounds like quite a lot of work though, which would be hard to justify for the tiny number of impacted accounts and zero revenue potential.
It isn't as far as I can see.
IMO it is just Google trampling over peoples rights while trying to use a weird reading of GDPR as excuse.
I'm so ready for EU to start punishing more of the blatant abuse of GDPR that we see, especially by the big players in the market.
At ground level, bank employees blame irrational form filling, small and nonsensical process requirements on "regulation." In reality, they are implementing a bank "compliance" policy that is relates to regulation. That way, neither the regulator nor the bank is culpable... either for solving the problem or for consequences of the solution. Meanwhile, the banks themselves probably lobbied for the regulation specifics, and almost certainly wrote large parts of it themselves. It's cozy.
At Google-scale, there is no dividing line between between private & government bureaucracies. They're merged in a way that evolves to deflect criticism & responsibility from both.
The scariest line, to me, was this:
"These companies have access to a tremendously invasive amount of data about people’s lives. And still they don’t have the context of what people’s lives actually are."
Well... "luckily" Google & such are getting better all the time at "context." The response to such issues is usually to deepen the bureaucracies, not to pull back.
> Muldoon added that Google staffers who review CSAM were trained by medical experts to look for rashes or other issues. They themselves, however, were not medical experts and medical experts were not consulted when reviewing each case, she said.
Which is a nice way of saying: "AI flagged the pictures, we can't really judge if they are medical pictures or not. Enjoy your permaban!"
Besides, permabanning someone because of a single flagged picture seems like a dumb policy anyway. Even if there was no rash or inflammation in the picture, the child could have had a pain in the groin, so wanting to visually examine it could make sense for a doctor.
Even if you eventually resolve things, its a life ruining event to even have to go through this process.
There was no way I could recover his account after this. Ultimately he just created a new account, with reversed first and last name and the same profile picture which seems to have fooled the almighty AI.
It was however, trivial for her to make a new account.
If not, the answer is: obviously yes.
People risk their entire lives for significantly less.
I work for another FAANG, and I would never be able to take any action on any part of a customer's account.
I guarantee you Tommy that works in the team that handles tags on marketplace listings cannot do anything about any other system in Facebook.
Humans are great at solving technical issues with human solutions…
About 10 days ago, my 3 year old son developed Bell's palsy in a period of 24 hours. This means the right side of his face became paralyzed, for no good/known reason. Most cases of Bell's palsy, esp. with toddlers, go away within about a month.
https://en.wikipedia.org/wiki/Bell%27s_palsy
I'm taking videos of his face every day to track progress, to see whether it's recovering. Also, I'm sharing some of the videos on a Messenger chat with other concerned family members. Obviously, since this is his face, I'm not in danger of violating any TOS on this. I have Google Photos auto-upload turned on.
But, knowing how stressed I was when this started, I was definitely not thinking about Google's (or Facebook's) TOS when I was making the videos, so if it had been some other condition where the affected area was the groin, like in the article, I'm pretty sure I would not have realized I'm risking my entire online presence.
Some good news to close: my son's face is showing good movement after ~10 days, so I think he'll recover within a month.
If you have a genuine requirement for photo sharing -- to share your shild's photos with their doctor, say -- there are plenty of other ways to do that. It's not like you're some captive hostage to Google here.
eta: I do wish your child wellness and a speedy recovery!
eta2: To the downvoters: Go for it - I can afford the decrementing of a number in someone else's computer. But. This was not an attack on the parent. Answer the damn questions!
Maybe not now but Google/Apple will scan your photos for potential child abuse.
Get your kid tested for Borrelia burgdorferi. If you catch it early, there will be a lower likelihood of ill effects.
I spotted Lyme in myself around age 12 thanks to Wikipedia’s article on Bell’s and confirmed the infection the same week via blood test. Next to nobody clears it on their own.
Can someone explain what Google's logic is? At this point [after the news articles], clearly humans are involved at Google, clearly they know this is not child porn, so why not reinstate the account and move on?
Basically, CSAM is too radioactive for common sense.
"But a kid seeing a nipple isn't illegal here"
"Doesn't matter, it's illegal in 'Merica, so to simplify things, it's now illegal wherever Google operates "
I guess it's payback for the EU cookies banners. /s
"We are Google. We don't give a fuck."
Therefore, this account and all the data contained is already gone. The most they could do is allow him to create a new account with the same name, but to my knowledge that isn't supported technically in their systems (too many bugs to be found by re-using unique identifiers).
Changing this would probably be a huuuuge undertaking, since every Google product would have to be modified to expect email addresses might be reused for a new account. And some products are in maintenance/bugfix only mode, so those products would probably have to be sunsetted if the changes were too invasive.
That's why they stand by their decision - they don't currently have the capability to implement any other option.
* Google provides a good product free of charge to everybody, but claims it can withdraw the offer to anyone with no notice and without giving any reason. The law should require more rights, guarantees and due process even for free service providers. At minimum, the right to recover my data, the right to have some time to fix the problem, the right to have everyone following the same rules, knowing the rules and knowing the exact violation, and some basic warrantees. As a parallel: Malls are open for everyone just like Google, and it still doesn't allow them to ban people at random. The USA learned with black people how quickly this becomes ugly. But a mall still can remove customers too troubling, the cops can be called, and both mall and customer can sue if it is really worth it.
* People should pay (and be able to pay) for a product that is worth it. The services provided by Google are easily worth money.
* It's hard to ban anyone on the internet without a stable identity, government provided or not. People just take a new identity and come back. This is especially sensitive in the USA, but it causes all kinds of trouble. Maybe coupling the ID to a payment is an alternative, so you can get a new ID if you pay for it. €10 /id / year would probably be enough to shut out almost every troublemaker, and the law can deal with what's left.
* The child porn laws are insane and should be changed. It is not normal that you can send a picture to someone, and the law requires the receiver should go to jail even without him knowing anything happened. Under such laws, the google 'scorched earth' policy is the only option they have.
* EULAs need to cease existing. If I buy an Andriod phone, I give money to the manufacturer, the manufacturer gives money to Google. That means I should have a right to access google play etc without all kinds of EULAs making the device I bought non-functional on any whim from Google. Just paying should be enough. It used to be that license agreements existed only between companies, and were deemed too complicated for ordinary consumers. The 'End User' aspect has to die off. Normal copyright will still protect the software just as it does with books and DVDs, so there really is no need.
Also, see Apple’s scanning stance. Google isn’t obligated to scan and report to law enforcement.
Not long ago, every other comment about a case like this would say "well, Google is a private corporation, they can do as they please".
Now, those comments have disappeared and most comments call for more regulation.
The same thing happened with advertising. In the 2010s many people here advocated in favor of advertising, and often said ad-blockers were bad, useless, or criminal. And then the dominant view became that the Internet is absolutely unusable without a proper adblocker.
Not sure if any positive change will come out of this (advertising certainly didn't go away) but it's fascinating to see.
Props though to the SF police which has stopped the investigation when, I guess automatically, they had been made aware of the whole thing by Google. I suspect in a few years' time that won't be the case anymore, even the Police investigation in this sort of cases will have become "automated".
I will wait a bit for email (too complicated), but as for pictures, any software you would recommend? Ideally, the server should run on a Raspberry Pi and has face recognition and automatic tagging.
I have Google One account for in person Google support in case shit hits fan.
Shit hits fan, for some reason my youtube account with premium gets banned for scams, despite account only ever used for viewing. So I make another one with premium that got banned a couple months later, again account only used for viewing. The kicker, once they ban your account, you are denied from subscription page and cannot CANCEL premium sub. And you can only appeal decision every two weeks which so far has been automatically rejected after a couple hours. Meanwhile I contact Google One who helpfully forwarded issue to YT team, and their response "we're not equipped to deal with this issue".
Current in the process of taking out my entire account data so I can cancel credit card attached to Google services, hoping it would kill the premium charges without getting the rest of my data wiped. Or all my playstore purchases. Utterly absurd situation. Pretty sure it's fraud, but there's one useful to resolve situation, even in person.
I leave new pictures on my iPhone without any iCloud backups, make a backup to my PC hard disk once a month, and make a backup to BD-R once a year (and then remove everything older than a year from my phone). I don't feel I'm missing out an anything by not putting everything on some server. Even in the past when I did use automatic cloud backups, I don't recall ever really needing to have access to some years old picture immediately.
I'm not a digi-luditte, I do occasionally send irrelevant pics to family and friends in Whatsapp (which I do assume can be eavesdropped at any moment, so I don't send truly private stuff). But I don't think having every personal photo and video I ever took accessible within a second improves my life in a significant way.
Consumers must demand this (i.e., e2e encryption and no peeking) and shun products that don't offer it.
I hope the father sues GOOG and wins hundreds of millions in damages for mental anguish, defamation, breach of privacy, denial of service, discrimination (do you think GOOG has never reinstated an account previously?) and every other legal grounds they have violated.
Well, this is Google having an AI classify your images as potential CSAM and having had that for a while and everyone’s cool with it.
The Apple thing was them proposing to run the classification on your phone. On personal, not uploaded anyware, images. People felt that was crossing a line.
The Apple thing was only attaching a hash code to each image and doing nothing else unless you uploaded it Apple’s servers.
Of course you would have to trust that the policy of only iCloud images would stay in place after they implemented a tool to scan everything on your phone, which seems like a terrible bet.
How can I prevent the photo from bring uploaded? I could disable autoupload, but as soon as I resume it, the photo will be uploaded, unless I remove it from the phone.
Any suggestions?
I deliberately bought a Pixel 6 in order to install GrapheneOS (a degoogled Android) and leave out all links to Google except for the Play store for a handful of apps pushed by governments and banks. The built-in camera app works fine, and OpenCamera is a great alternative too now that it supports all cameras of the Pixel 6.
Either find a service that you're paying for, or if you want to trust a big corp maybe go with Apple. Not perfect, but best of the lot from what I can see. All of the logic is on-device, so they're less inclined to peek at your photos. There was a big hubbub a while ago when they tried to do unsafe photo detection on-device, but they backtracked.
Go into more camera controls , enable Storage Access Framework, select custom directory.
AFAIK android phones upload all sorts of data to google by default, my recommendation is to install a custom ROM (like lineageOS), that will rid you of a lot of these privacy violators without dealing with them individually. If you don't want to do that, avoid google services/apps entirely for anything that you don't trust them with. I'm not familiar with google photos(never used it for (now) obvious reasons), and I don't know what features you need, so I can't really give recommendations on that specifically.
1. Setup a new personal domain and email on fastmail. I can take my email somewhere else if fastmail decides to ban me.
2. Setup account on Backblaze for my backups, Google drive can't be trusted.
3. Moved to alternatives for all Google services. Removed Google signin from all the other websites.
[1] https://www.theguardian.com/technology/2016/nov/17/google-su...
And what if Blacklaze decides to ban you?
I feel that you should never rely on a remote-provider for backups. Unless you own the hardware to where your data sits, you have no backups at all.
They are backups, you can make a new backup, unless your computer catchers fire at the same time as you get banned.
In many places, you need a phone from one of those two providers in order to do mundane things like riding the subway without having to jump through extra hoops.
For navigation without transportation, OsmAnd and OrganicMaps (both OpenStreetMap) often do quite well.
Which is a lot of apps that society assume people have access to!
Newpipe FTW
> it works pretty well without an account.
Disagree, especially given how broken YT Search is.
- Patients find it too risky to store medical information on Google drives/devices.
- Exhausted patients are forced to scrutinise every upload for the potential for Google to mistakenly perceive a breach of TOS.
This is not good for the world.
It’s not practical to not trust anyone and maintain a functional life. The real insight should be at regulating tech companies so they can’t do this anymore.
Email is a utility and should be regulated like one. The power company can’t just shut your house off because you tweeted something bad but for some reason tech companies can do effectively this.
More like, have alternatives ready and know what to do to avoid downtime if your main supermarket randomly permabans you for accidentally losing a receipt between purchase and exit, or having unaccounted for bottle of coke in your backpack that you bought at another store, or just looking sus. Or yes maybe it's found to be poisoning food. Fairly reasonable to be prepared.
> Email is a utility and should be regulated like one.
I want less barriers to operating my own email if I want it, having to get a license and such is the opposite of the goal. Maybe that's not what you mean though.
Generally regulating anything is a tradeoff. It helps established monopolies and prevents competition.
How is this relevant when discussing Gmail of all things? When was the last time they had an actual competitor with some market share (outside corporate email), Yahoo! Mail?
if you regulate alphabet in particular, that would send everyone a message that this is now the "officially approved" provider. no others are regulated, after all! it would only increase the barrier to competition.
competition is a good thing. currently, thanks to email+DNS being open protocols, there are no barriers to operating e-mail for your own domain or providing it as a service. as a result, plenty of profitable providers (fastmail, aws) between which users can seamlessly switch.
I'd say it's very practical to not exchange medical information over an insecure channel. I don't email naked pictures of myself or even worse share pictures of a child's genitals in some google drive folder anyone can copy or share. my life is perfectly functional. Anyone who deals with email should treat any email they write like they're public, because there's always one dude who copies some entire chain into a reply or forwards something to a hundred random people that weren't supposed to get it.
When you mail something like this you don't even know if the doctor or the secretary opens them. If they're immediately backed up to some remote server now some tech worker has access to naked pictures of your kid. You can't request to delete that information, there's no ownership. That's a completely insane way to treat your most sensitive data.
For tele-medicine there's strict regulations on the safety of apps and how patient data are treated. Consult doctors through one of those. I'm not even sure if it's technically legal for a doctor to interact with patient data as described in the article.
I don’t think there is any user error here. The user used the services and devices how they are meant to be used and google majorly messed up.
Reponding here only because HN blocked my ability to respond to your 8-minutes-ago comment or post a new one in thread that you have flagged.
Who gets to decide what's evil? Be careful what you wish for.
https://old.reddit.com/r/privacy/comments/voaicx/10_error_ra...
Granted, most people here on HN would be able to deploy their own, but you can't ask that of the average citizen who just needs email.
https://www.google.com/search?q=email+provider+service hundreds of options from the same page.
Don't put all your eggs in one basket, "everybody" knows that. It doesn't just apply to computers - non-techies are familiar with the concept too. It's common sense.
Careful what you wish for, though. Ever tried to sign up for a public utility without your real name, personal identification, a physical address, or billing information?
There are many states around the world where you can buy a prepaid SIM card without registration and participate in the public phone network. No permission at all required, cash payment works.
There is no direct connection between “public” utility and “requires registration.” But many public utilities consist in a delivery to a specific place (water, electricity) or want to charge you. So they need your address to perform their service.
Do it without an Google account.
But a postcard is a good example. Even the badest murder / raper in a prison will get a postcard.
That's horrific.
[1] https://www.zvv.ch/zvv/de/abos-und-tickets/tickets/einzelbil... [2] https://www.zvv.ch/zvv/de/allgemeine-seiten/medienmitteilung...
Änderung bei ÖV-Tickets Billettverkauf in Zürcher Regionalbussen wird abgeschafft
Änderung bei ÖV-Tickets
Billettverkauf in Zürcher Regionalbussen wird abgeschafft
https://www.tagesanzeiger.ch/billettverkauf-in-zuercher-regi...
I argue in this way since quite some time.
Same goes for Apple, Facebook etc. In Germany there is also some sort of compulsory contracting, for example in regards to energy supply.
Pay for an email service, and sue if you incur damages due to them terminating your service. Or run your own email server if you care to.
You pay Company X to host your email, and you enter into a service agreement. They kick your account off. If they're in violation of the service agreement, now you actually have a case against them. They know this. Their legal council knows this.
Feel free to vote for people who think companies can do as they please just because you aren't directly paying for them (even though they make money off you), I'll vote for other people.
It's ironic that you chose Standard Oil as an example. It was an unbeatable monopoly that was broken up by govt regulation, not by competition. You're arguing against your own position.
> Pay for an email service, and sue if you incur damages due to them terminating your service.
You always sign away this right when using a commercial email service. Their terms of use allow them to terminate your account with impunity.
> Or run your own email server if you care to.
This is a very 1990s understanding of the email ecosystem. It's almost impossible to start a new email service today because the big players (primarily Google and Microsoft) won't trust you and will silently refuse to deliver your emails. Sometimes you will be blanket banned, sometimes you'll just have a few missing here or there.
Because the email market is dominated by so few players, they have complete control over the ecosystem. Even if you choose your email service, your recipients will have chosen one of the big players 99.999% of the time, meaning you're also playing by their rules.
You realize that Standard Oil was broken up by the courts through the Sherman Act, which is precisely the type of regulatory action you're arguing against, right?
> Its history as one of the world's first and largest multinational corporations ended in 1911, when the U.S. Supreme Court ruled that it was an illegal monopoly.
Seems like it was broken up by the government and not due to competition.
Only to find your mail blackholed by said behemoths because your counterparty uses them.
I think the problem goes even deeper than that. No non-state actor, who holds no democratic mandate of any kind, should hold the kind of power over citizens that Google holds.
Regulation is a ship that has kind of sailed, in my mind. The kind of regulation that we now recognize we need would have had to be in place 20 years ago. ...mostly antitrust stuff, but also specialized things like privacy / data protection and "due process" for things like account suspensions etc.
If such regulation had been in place, it would have prevented the formation of an entity such as Google in the first place, and we would instead have a healthy system of smaller players competing on who does the best job at providing the kinds of functions to society that Google provides.
Now that we are in the unfortunate situation we are in, I think it might be necessary to consider nationalizing the whole thing and putting in place governance with a democratic mandate.
I'd say the same for communication in general, if possible, but using Android without Google is difficult for the average user.
If my google account is blocked, I can’t even begin to imagine the extent of what would happen to my day to day.
Having too much linked to one group, especially one famed for terrible user care when something goes wrong, is just asking for this sort of accident to happen, and for it to affect you as widely as possible.
What are those "countries" you speak of?
Do you mean where the user resides?
Do you mean where the data is stored?
Do you mean where Google is incorporated?
Do any of these "countries" matter when it is a corporation with a country-sized budget on the left side of the ring?
or if you are into hosting things yourself on a VPS or your own NAS at home there are even more options to choose from: https://github.com/awesome-selfhosted/awesome-selfhosted
theres also yunohost or sandstorm that make self-hosting a bit easier for first timers
I hope I didn’t overstep some kind of bullshit law where I can’t take pictures for medical advice.. this is ridiculous, and I’m happy that I’m not pushing my pics automatically to google, I might have been banned? I still have the pics somewhere on my phone, probably, amongst others where he’s naked when he was messing with foam in the bath or playing in the garden with water in summer. Isn’t this like 90% of parents?!
I feel that this whole CSAM is a new obsession of phone actors because they feel there’s norhing else they can innovate on.
Define "allowed"
By whom in particular.
Quit Google Now. Remember that you were always a bit stupid to choose Gmail and bite the bullet and get rid of it. If you are an Android user, I feel your pain.
The only thing I am a bit reluctant to throw away is my YT account. But if the content quality degradation keeps on going, it will eventually be quite easy to throw out.
Thank God for AI, planting evidence and automatically ruining someone's livelyhood has never been so algorithmically efficient!
Interesting attack vector!
As a user, there is a dispute process but as a user I must obey the ToS if I don’t want my account to be deleted. If someone came into your place of business and began taking explicit photos of their child, for medical or any other reason, would you stand for it? Would you give them a second chance to explain themselves?
Google’s place of business is whatever you do on your phone and any content generated by it. You don’t own Android OS just by buying a phone the same way you don’t own a pizza shop just by buying a slice of pizza there.
But Google needs to make a bigger deal of the fact that their services shouldn't be relied on for any particular purpose. (I feel the same way about banking apps too)
Starting in March 2020, due to, well, you know, all of our doctors started doing consultations via video chat and picture-enabled text messaging. This service continues to this day, particularly for our most vulnerable patients (which included, until very recently, children under five who could not be vaccinated against the novel coronavirus).
Children come down with a lot of things that look strange to parents, especially new parents who have never had a child before. Especially parents who are staying home with their children to avoid a new (that's where the "novel" part of "novel coronavirus" comes from) disease that they don't want to give to themselves or their kids.
What you've advocated for is a world where parents can't communicate with doctors except by showing up in person. This is something we demonstrably do not want for a whole host of reasons. For a period of almost a year, unless you were basically bleeding from an artery or your arm was hanging by a thread, you could not see a doctor in person, at least not through our group.
It should be common sense that we are intelligent, thinking beings with the ability to discern right from wrong and that those are not binary choices. There are myriad reasons why someone might take a photo of a naked child that are free of malicious intent and, legally, are perfectly valid. Medical assistance is just one of them.
I never said that I advocate for making the production / transmission of certain types of photos illegal.
Personally, I advocate for freedom of speech, but I recognize that there exists laws currently that restrict it in America. I say that it is common sense because that is the one thing you aren't allowed to post on the internet. Everything else you can get away with.