nanog mailing list archives

Re: Google Abuse


From: Mark Seiden <mis () seiden com>
Date: Tue, 16 Aug 2022 12:47:58 -0700

well, that isn’t exactly true.  

ALL of the fraudsters, business email compromisers, spoofing accounts are now from gmail and as far as i can tell,
there is no evidence that they do ANYTHING about them.    i recently gave a talk on fraudulent restaurant reviews
in google maps.  easy for humans to spot.  (hundreds of machine learning engineers at google.  what are they doing?)

but here’s a counterexample… not that it serves anyone particularly well:

a colleague of mine (ex googler, superb engineer, with a brother who is a current googler) had ALL of his google 
accounts
deactivated recently.  a google fi customer, he used it to send an mms photo of a rash on his toddler’s crotch to his 
wife, 
so she could upload it (using https) to their pediatrician’s portal for diagnosis.

a few days later the cops were at the door with a search warrant.  the cops agreed it was a false positive, but despite 
that,
the accounts were deactivated (including gmail), seemingly permanently, despite multiple attempts to revive it and 
attempts
at escalation.

i was actually surprised.  i thought that google fi was a neutral pipe.

who knew that google mines mms images for pink parts?

do the other cell phone companies do the same?  (not that i particularly need to test it…)

(is there any transparency here regarding the scanning and retention policy for sms and mms contents?)

which raises, in the post-boggs world, another question:

are google, like fb, recording and retaining direct messages and sms/mms contents, so they can turn them over 
to law enforcement who have become “interested" in who was pregnant and who stopped being pregnant?

https://www.vice.com/en/article/n7zevd/this-is-the-data-facebook-gave-police-to-prosecute-a-teenager-for-abortion

(once again, there ain’t no sanity clause.)


On Aug 16, 2022, at 10:43 AM, Jon Lewis <jlewis () lewis org> wrote:

On Tue, 16 Aug 2022, Cristian Cardoso wrote:

Hi
I'm receiving thousands of requests from a Google Clou VM on my network, I've already sent reports to Abuse from 
GCP, but without success, does anyone happen to have a Google abuse
contact to indicate?

There is no Google abuse.  It's just traffic you don't want that they don't care about.  Block it at your edge and 
move on.

----------------------------------------------------------------------
Jon Lewis, MCP :)           |  I route
StackPath, Sr. Neteng       |  therefore you are
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________


Current thread: