Hacker News new | ask | show | jobs
by esprehn 1339 days ago
Fwiw that was 12 years ago, and a lot of the Google infra has changed quite a bit since then to make looking at user data much harder and track access more explicitly.
1 comments

I really want Google to advertise this...

Ie. I want them to commit to "No human who works at Google will ever see your email or photos without you knowing about it". And then splash that statement all over TV ads.

Set up some system so every time an engineer sees user data, the owner of that data is sent a notification (and there are legit reasons for that, like investigating a bug a user has reported). It doesn't need to be for every kind of user data, just the super sensitive ones like the text of emails.

While it doesn't work for consumer accounts, https://support.google.com/a/answer/9230474?hl=en already exists, and https://cloud.google.com/cloud-provider-access-management/ac... goes further, requiring your consent before access. Although it doesn't work for certain legally mandated things