Conversation

I can't believe Google just went straight up "if Parental Supervision has been added to your account [by the hacker], recovery is impossible"

https://support.google.com/accounts/thread/424039493

Google, world's largest security company (because they bought everyone else), officially advises you to.. not get hacked. Good luck woozy_ie

2
0
0

@anthropy unfortunately, I understand why

They are basically saying that anything you could say to us, a social engineer and phisher could too, and they absolutely would

So at some point, we can't trust anyone and it's better the account is "lost"

Such is the cost of "scale" and being such a target. And just another reason I de-Googled years ago

See also, the cul de sac that is the Microsoft Data Account Recovery team if you lose all Tenat Admin accounts in Office365

1
0
0

@anthropy I feel like it's a bureaucratic failure of security rather than a technical failure of security, they just don't want to set up processes to verify whether a request to "deparent" an account is legitimate or just a savvy kid

1
0
0

@me they should be able to see if the birthday suddenly changed (part of the hack), if the person has had a credit card attached for ages, and in general if the account has existed for 10-15+ years tbh. Right now there's just zero option, even if you can prove it.

The only way is if it is a workspace account, but at that point you don't need them anyway (unless the admin account got hacked)

cc @jhwgh1968

1
0
0

@anthropy since I cannot see the post from @me you are replying to (apparently my server doesn't federate theirs) I have no comment

0
0
0

@jhwgh1968 @anthropy which is then racconnected to a huge part of the owners life which google fails to racconsider

1
0
1

@charlotte @anthropy oh yeah I'm not saying it's not shitty

I'm saying it's a reason we need to get rid of *any* SaaS based huge company, bc they will all end up in this position due to the dynamics of cyber crime. So it's just not Google specific

0
1
1