February 15, 2020

 

Google's fake security procedures

Sometimes Google locks my secondary accounts (email at my own domain), only to ask then to "confirm it's you" via SMS to phone. But there's no security phone registered for that account! So the procedure is:
  1. Lock account.
  2. On log in, check for password and then ask for phone.
  3. Accept OTP via any phone. Note: the phone is not stored as security phone! It's only one time random phone.
Hey, Google, what's the point in that? It's clearly not for security. Is that all to verify that my Jira sending-mail account is not bot? Well, I got news: it's bot, actually. And I need it. And seems you don't like that fact.

So I expect more problems with using gmail to send automatic notifications from my small service installations like personal devops. This means it's much better to discover and move to custom mail server from Gmail. Sounds like a paradise: no more worrying on email account locking, no more "look into spam folder". This is how email is supposed to work :)

The only real big problem is that Google is actually implements fake security, with fake like in "fake news". Something in the shell called "security" but not actually that. So it lies its users covering intentions with "security" topic, like "we've blocked your account to increase security". Or wait, that's not account's security, but a Google one (like secure our infrastructure with getting rid of bots)?

Labels: , , , ,

This page is powered by Blogger. Isn't yours?