Hacker News new | ask | show | jobs
by Fiadliel 2403 days ago
Google’s statement is, in my opinion, disingenuous.

Including personal information on your work calendar without using privacy controls is pretty bad practice, though obviously some people occasionally did it. There is no indication that this information was a target of the fired employees. There is also no indication that these personal events were included in screenshots “outside the company”. And that phrase encompasses a wide range of possibilities, I suspect that Google made it so general because the specifics would have sounded more benign.

The statement in general is designed to cast the four in the worst possible light.

3 comments

Irrespective of Google's statement, it appears that the people they were following felt unsafe. There's a little bit of "why didn't you tell me" to this. If someone were cataloging my every movement because I left my phone broadcasting to a bunch of Bluetooth beacons then sure it's my fault for doing that but if you're my coworker surely you'd tell me! If you instead were all like "Yup, it's bad practice to be doing that so of course I could tell where you were at all times. All I did was set up the beacons, man. You broadcast to them." I'd think they were pretty fucking weird. I'd seriously think they're a kook of some sort.

Likewise, if you saw me put "Get kidney transplant" on my calendar and decided to subscribe to my calendar, then that's pretty fucking weird. I wouldn't buy "that's bad practice so I was allowed to stalk you". I'd be like "this dude is a fucking weirdo, can I go work elsewhere?".

My calendar at every place I've worked has been public with private events for sensitive stuff but any time I put some private stuff public I'd expect someone to ask me if I meant to do that if they noticed.

If you can get someone to agree on the record that they felt unsafe, you then have cover to take almost any action on behalf of their safety.
I do appreciate that some people felt unsafe, but I wonder how exactly the messaging was made. Nobody ever came to me and asked how I felt about my work calendar being shared. You can't even get that information from Google.

So this information on sharing was provided to particular people, and they were asked, "do you feel scared?". Presentation is everything, and if presented in terms of how their personal information was included, it can feel different compared to when shown in neutral terms. In addition, if these people were told that the four employees were dangerous or a threat, this will also colour their viewpoints.

Bluetooth and kidney transplant arguments are about two hypothetical stories, and pointing out that if these had happened, it would be weird (well, yes it would, but that's not this story, they are very different).

Why in the first place someone was screencapping someone's calendar? Were they trying to organize some impromptu meeting with a hihger-up? Who was scared exactly? How did this came to light?

I mean if the recently fired folks tried to pressure some other group, that's bad, and it seems it has nothing to do with unionizing. But if they were trying to catch some elusive exec to have a statement from, that could be different.

But there are no specifics anywhere, just "Google bad, union good" or "stalkers bad"

Agreed that there's not enough context to say why screencapping happened, what happened to said screencaps, and how all of this turned into scared employees.

I currently perceive Google's note as if it were a press release; treat with appropriate scepticism. We'll have to see if more information comes to light.

Many would argue that the team the person looked up was making other employees feel unsafe by installing a mandatory policy enforcement chrome plugin for the entire company. So looking at their calendars and seeing what their meetings are about could just be seen as making sure the team isn't doing something nefarious. But of course the people who spies on behalf of management gets special privileges so nobody gets to even look up public information about them, then they evidently get fired.

Example of employees feeling targeted:

https://time.com/5709653/google-employee-spy-tool/

> There is no indication that this information was a target of the fired employees.

This bit?

"The individual set up notifications so that they received emails detailing the work and whereabouts of those employees, including personal matters such as 1:1s, medical appointments and family activities"

They obviously subscribed to work calendars in order to follow the work activities of those people. There is no other technical way to do that.

There isn’t a way to separate out personal events — which shouldn’t be there, or at least should be marked private.

That this information was included, does not indicate that it was a target; it does indicate that it was a useful way for Google to attack their actions.

Even if it was purely just to follow their internal work calendar - which seems unlikely, as they weren't people in their work group - it doesn't explain this:

>"Screenshots of some of their calendars, including their names and details, subsequently made their way outside the company."

There is no reason to be sharing a work calendar with others outside the company, and without that person's permission.

> subsequently made their way outside the company

Does Google allege that the fired workers were responsible for that?

The quote clearly suggests that, but if Google won't make a clear allegation (in a statement containing other clear allegations), they must not have much evidence, if any.

If google is making false statements on the matter they will be in for a world of hurt. Its just not likely that large, publicly traded, heavily scrutinized corps like Google are going to lie about matters soon to be litigated.

Meanwhile the individuals in question have zero reason NOT to lie to reporters; they're under no legal obligations and can say what they want.

> If google is making false statements on the matter they will be in for a world of hurt.

Is that so? When faced with unions in their infancy, often the companies come out with all guns blazing. They might even face fines after an incredibly lengthy court battle, but putting down that organizing effort down while it hasn't taken roots is more important to them.

> If google is making false statements on the matter they will be in for a world of hurt. Its just not likely that large, publicly traded, heavily scrutinized corps like Google are going to lie about matters soon to be litigated.

The potential lying from Google is also done by individuals who have no obligations to tell the truth. To me it seems incredibly rare that a human being (the person(s) doing the lying) gets any significant punishment for actions credited to a company. In my observation the more common scenarios are that the company and employees either fully get away with blatant lies or the company has to pay a small fine in relation to its profits.

I'm sure it's just a crazy coincidence...
Google's statement does not claim that the screenshots were shared with others. "Outside the company" covers a multitude of possibilities. It could also include saving screenshots in one's personal GMail account (in Google Docs, etc.), which Google may be able to access (I don't know if they can or not, but the relevant company is the US, where these things are usually more legal than in the EU).

If so, it might suggest a wish to share with people in future, e.g. in a court case, etc., but it doesn't necessarily mean that this information _has been_ shared.

It could also mean that the information _was_ shared with others, just pointing out that it isn't exactly what the statement says.

There is a way - use different calendars for work and home. Preferably with different accounts (work account vs personal account).

You can then blend the 2 calendars either in the mobile app, or by importing one to the other account.

I'm a bit surprised to hear some people would use their work calendar for personal activities, I don't see why you would do that.

I sometimes put personal appointments into a work calendar to avoid getting people scheduling meetings for that time (as a manager, I get a lot of people scheduling meetings on my behalf).

Usually the personal details are pretty sparse -- just containing the minimum I'd normally share in person eg "dentist", "doctors", "kids school performance" / "parents evening". These would be days where I'm technically working but organising my work hours around a personal appointment (otherwise I'd just put "annual leave" if I'm taking a full or half day off).

This would be enough to fall in line with Google's statement even though I'm technically not using work's calendar for personal appointments.

I meant, there is no way for subscribers to a calendar to do that automatically. There are possible heuristics that could filter out clearly personal entries (keywords, etc.), but that feature would need to be implemented by (cough) Google.

There are obvious ways for calendar owners to separate the information (which was not done in the instances that Google refer to).

Because you have one life and busy days and personal and professional merge with a lunchtime meeting then an afternoon doctor's appointment etc.

When you are back to back most days (common at Google) you can't be juggling multiple calendar accounts all the time, not least because a personal event doesn't show on your professional cal meaning someone can try to double book that slot.

Idk, I use Google Calendar (browser, android app) and currently run work calendar, private calendar, and facebook events seamlessly. Don't think I've spent much time at all setting it up, either.
Other people can't see the other calendars though.
Right, but there's no way to separate out personal events when you subscribe to someone else's work calendar if they put personal events on their work calendar.
But if you subcribe to such (edit: you colleague's) calendars for work purposes then why set up notifications for family activities ?
> "The individual set up notifications so that they received emails detailing the work and whereabouts of those employees, including personal matters such as 1:1s, medical appointments and family activities"

Which could mean simply:

1) individual subscribed to other employee's work calendars, which are visible to everyone within Google,

2) individual had calendar notifications turned on, and

3) other employees posted personal matters on their work calendars.

This appears to be the default for G Suite settings, though. I can set up notifications to receive emails about work calendar entries for anyone in my company.

Details around medical, family etc. are only visible if the employee adds that information to their work calendar.

It's a little stalky, but yeah your work calendar is public on purpose - it's incredibly useful. People look it up before walking to your desk to chat and especially before setting up meetings. Just put a block of "busy", serves the same purpose. Nobody really cares if you're in a hospital or just running.
Does that give them the right to take a screenshot of it and send it out of the company?
You cannot take any screenshot or any document or any piece of code from any company. This is common sense, in addition to probably being a copyright issue. I'm not sure why would anyone expect to be respected by their employer without following this rule.

I meant public as in "internally public".

Including personal information on your work calendar without using privacy controls is pretty bad practice, though obviously some people occasionally did it.

Given the attitude Google itself has towards privacy in general, I'm not at all surprised by this... if I remember correctly, employees are even expected (obliged?) to use their personal Google account for work.

I'd never work for Google, one of the reasons being this "work-life mixing". I personally maintain a very strict "firewall" between personal and employee matters.

> if I remember correctly, employees are even expected (obliged?) to use their personal Google account for work.

You remember completely incorrectly.