Hacker News Reader

This was different, admittedly. Their account got session jacked and taken over by a crypto scamming farm. Google was in the right to shut down the account until it could get resolved.

The fact people can get session jacked by Google, though, is still wild. Linus explained that their access control granularity is woefully underdeveloped, especially for such a large company.

View on HN

Their account was shut down days after the crypto scam issue was resolved. They discussed it on the WAN show from the week before last.

Still, the way they handle it is extremely bad. It takes a long time to get the account re-instated and they just take down the whole thing in the meantime. What they should do is make the account read-only and if it was taken over by a malicious actor then just rollback to a previous state asap. For accounts with millions of followers they should have emergency contacts and a process that resolves this within less than 24h. These Youtube channels generate serious revenue that easily would justify the costs.

Reply on news.ycombinator.com