Unable to deal with Chrome Extension Team, Kozmos is shutting down
kodfabrik.com
kodfabrik.com
I was part of a student association when I was an university student.
Part of the activities was to host gnu/Linux courses record them and upload them to YouTube.
One day, out of the blue, the channel goes dark and nobody knows why.
We all panicked. We had received no warnings and there was no way to appeal.
In the end, we asked some former students that were employed by Google to pull some levers internally, and we managed to get our channel restored.
I am 99% on DuckDuckGo and other search engines, Firefox (which is great), Lots of mail providers these days which excel on every front, lots devtools that don’t need any Google infrastructure,
I really hope one of these days we get a message from Google (btw Google is really the most faceless organization out there, I really need to think hard to give you any names) that they will change their tune, but until that time, its best to leave.
The last straw will be abandoning Gmail :)
I've seen similar situations happen with Facebook, where entire businesses with what you might think were significant ad budgets were completely shut out of advertising on FB because its system for advertisers was broken yet again. I guess if you have a very small number of channels that are totally dominant, as Google and FB now are, you can afford to throw away a thousand here or even a million there if it saves you millions in support costs.
Whether organisations that have become so dominant should be legally allowed to do that, given the unfair adverse effect it can have on others operating in the ecosystems they create, is a different question. Just as we have laws about monopolies and limit what they can do in other contexts, maybe it's time for the handful of businesses that dominate online advertising or marketplaces to be regulated for the protection of everyone else.
It's more like dealing with a blind automaton, and that's becoming more common outside of Google, too. Automation support scales well because the fixed costs are high but the marginal cost is low, human attention scales poorly, with a high marginal cost.
You’re better off with a highly rated news.yc post.
Here, fixed it for you.
They certainly did their best to prevent any other OS from being on your hardware.
They coined the term embrace, extend, extinguish. See the history of Internet Explorer.
I mean Steam was made as a panicked reaction when Microsoft announced its Windows store. People in the industry knew very well what they were trying to do.
Naive question to you and to other extension developers here ... how does Firefox do when it comes to this issue? Is it just that the market share is so much lower that it's not worth developing for FF? I ask this as a happy FF user on mac, linux, ios.
The most painful incompatibility I've read about was in the Bitwarden extension, which basically doesn't support most operations in Firefox private windows because Firefox intentionally doesn't support getBackgroundPage() from there, and Bitwarden architected their extension to use that for all IPC between their frontend and backend layers. You can avoid that incompatibility by using runtime.sendMessage for that purpose, but they didn't know that at the time they wrote it (there's a warning about it in the MDN docs for getBackgroundPage now, but that warning wasn't there at the time). We happened to have gotten lucky in our extension in that we use sendMessage for the same purpose, but we certainly didn't know about that incompatibility at the time we were making the architectural decision.
Beyond just making it work, our team would also want to be able to automate regression tests against Firefox if we were to officially support it. For a long time, selenium was the most realistic option for that, but we switched away from selenium to puppeteer a year ago due to reliability issues with the former. Now that Firefox support in puppeteer is very recently starting to stabilize, we're hopeful we'd be able to use that, but we haven't tried it yet and it's new enough that we wouldn't expect it to be fully compatible/stable yet.
I haven't used Chrome since I've left Google and would recommend everyone to move to an alternative non-Chrome-based browser for a more balanced ecosystem. All the bad behaviour can be avoided when companies actually need to look after retaining users and taking care of not so frequent cases and I hope better business practices can come up without the need for government intervention.
Maybe this text on your front page is triggering someone at Google extensions department?
The police should/would tell you.
Sorry, this is the only explanation I have for this, I've worked with this kind of person twice. Once they got the first version of something running they are done, no further testing, no sanity checks, no asserts or logger.warn() for "this can never happen" branches.
BTW, this doesn't have to be a conscious choice of anyone at Google, it could just be the way the incentives turn out.
Exactly. This is basically a replay of the way Microsoft treated developers of third-party Windows programs in the 1990s. Only the time scale was different; you typically had at least a few years before MS either integrated your killer feature into Windows, or changed something about the Windows internals that broke your program, either way killing your business.
At the same time, it seemed to not have had that many users yet, so, a bit early for Google to pay attention?
So your theory about Google wanting to run a bookmarking service I think is correct. Human curated links continue to be the only source of semantically relevant content. Everything else is algorithmic extraction of the relevant associations created by humans.
I have stuff saved in there dating from 2007 to 2015. Used to use a Firefox extension to load them in the sidebar.
Chrome supported/promoted its extensibility early on because it was seen as a competitive feature when compared to IE and Firefox at the time. At the time, FF supported a huge library of extensions, and Chrome's job was to eat FF's market share (and IE's). Thus, extensions were an obvious thing for them.
Now, extensions present pretty much nothing but problems for Google:
* Features that compete with Android * Features that compete with their own offerings, like Pushbullet * Features that actively harm their offerings, like adblockers * Features that actively harm their enterprise customers, like anti-paywalls
There's NO upside now for Chrome to support extensions, and ALL downside. They certainly don't need them in order to keep browser share. Too many people use it now.
By the way that description is one aspect of a monopoly (no, I don't want to start that discussion. Just pointing out that that behavior isn't possible in a competitive environment).
Isn't one of the 'main' criteria around anti-trust how a company impacts the consumer ? this sort of thing sounds harmful to the consumer (fewer choices, actively taking down products consumers use, etc.)
Until Firefox or Edge catches up in both performance and implementation compatibility to make Chrome-first sites work, extension support isn't incentivized
There are a large number of user-hostile behaviors that stretch across industries: ad-funded software, app stores pushing microtransactions, wildly inconsistent interfaces and behaviors across DOM-driven software, opt-out behavior for things like arbitrary internet access.... user unfriendliness is the default state of software and even the most user friendly software still neglects the needs of many of their potential users.
This is a fact of software built in bounded time to be resold for passive income and “support” (which means “bug explainer” and possibly “refund-giver” in most corporate cultures).
I don’t use Google extensions on Chrome, and increasingly I don’t use Chrome.
That's what finally started bothering me enough, I don't feel comfortable keeping my search history and email in the same basket.
I'm currently in the process of switching to protonmail.com, which has been a positive experience so far.
In my case, I make a nice little side income from that extension so it would be a noticeable income hit. But I'm not sure of anything I can really do to prevent it from being shut down if and when Google's robots decide the time has come.
Sorry, not trying to be obtuse, just curious from a side-income perspective.
Paying users seem to be part productivity nerds who maybe aren't technical enough to grok installing from the repo, and part people who just choose to pay for the automatic upgrades or to support the developer. Also, lots of users are web gamers who use it for in-game automation.
I wrote a post about it 1 week after monetizing, if you're curious: https://critter.blog/2020/01/14/week-1-of-monetizing-my-chro...
Me: Hey, this must be a mistake
> Google (Robot): No mistake, review these policies, your extension violates one of them
Me: It does not violate any of them, this is a mistake!
> Google (Finally human): Oh, sorry, a mistake.
Obviously someone just needs to create a robot that automatically replies to the takedown notices and disputes them, thus closing the loop!
Also, someone would have to program that bot and can you even imagine how dead inside you'd feel if that was your life?
Would you feel dead inside if your tool helped developers keep their projects online? Sounds rewarding to fight the big guy and keep cool projects online.
Even with my trivial side-project and a grand total of two releases so far, Google ar itrarily rejected one release for being "spammy" when there was literally a 5 line diff between it and the previous release. Thankfully just finding the depreciated dashboard and uploading an icon (the "new dashboard" doesn't have this feature yet apparently) got it through after resubmitting it.
It feels like they've set themselves as gatekeepers of Chrome extensions (Windows users can only install from the "store") but they aren't actually interested in doing the job even though you pay an admin fee for the privilege of developing a free extension for their browser.
This is a great but only a temporary solution. Firefox is taking jabs at extensions not on its recommended list with slightly scary warnings.
Firefox as a privacy focused browser should give users the ability to limit permission or sites extension can run on - including click to run option.
Without this, they'll soon go the way of chrome.
Heck Chrome started locking down extensions when they started catering courting enterprises. And they included the ability to make extensions uninstallable.
Bad actors took advantage of it, forcing chrome to tighten things further until extensions could only be installed from the store.
I couldn't ask them to switch browsers for my little side project. I have to co-operate with Google's bureaucracy. For what it's worth, so far it seems like Mozilla is not exactly streets ahead, but at least they didn't charge me and they seem to be fairer and more helpful to extension developers (they have a "self-distribution" mode with relaxed oversight I used while in private alpha, and their tools and docs are better).
When Chrome was better, I suggested friends and family use Chrome. Now I think most people would benefit from using Firefox as their primary driver.
I think we as developers overestimate the resistance to switching.
One way to tell if a conspiracy is crazy is if it doesn’t benefit rich people. This pretty clearly passes that test.
Yes, it really is the same guy: https://kodfabrik.com/journal/i-ve-just-liberated-my-modules. And, joking aside it would be wise to bear in mind that we're reading only one side of the story here. As with leftpad, there's another side to this.
With leftpad he told Kik, "fuck you" (https://medium.com/@mproberts/a-discussion-about-the-breakin...), and then wrought global havoc on npm users. Now he's claiming the Chrome Extension Team "continuously troll developers", and is pulling down something he's created... again.
I only have two data points, so the behaviour here is a coincidence rather than a pattern, but I will guarantee you whatever you think of Google there is more to this than meets the eye.
I'm not without sympathy for the author, but neither am I about to uncritically take his side.
In response to a threat starting with "We don’t mean to be a dick about it" and ending with "our trademark lawyers are going to be banging on your door and taking down your accounts and stuff like that", I did say "fuck you" to Kik.
If that makes me the character in your mind, enjoy your imagination.
And he did offer them a solution: $30,000 dollars, to which they promptly - albeit indirectly - replied with fuck you.
You're lucky you were treated as nicely as you were. It could have been a whole lot worse.
Lessons learned:
1. Hire an attorney when you get a takedown notice if you think you are likely to decline, and seek counsel before responding.
2. Telling people "fuck you" doesn't get you anywhere, and it doesn't matter how impolite or wrong you think the other person is.
You seem to want us to question the narrative based on the likability of the developer, but is it really relevant? Can you really imagine a data point that we don't know that will change the narrative of "solo developer getting steamrolled by corporate machinery"? Because that is what is happening in both cases. I want to be clear, this is not even about the solo developer actually being in the right, it is about the process or lack thereof that takes place to reach the conclusion. You might not like this particular guy, but I guarantee you a more likable guy would be/will be/is being equally strong-armed in these lopsided processes. Transparency, accountability and fairness would make all of us happy and not left guessing who might be right based on who writes the most likable emails or has the most popular brand.
So while his "likeability" is completely irrelevant, how else would we even hear about these issues if he didn't make a big fuss about it? I think that also might explain why we heard of this story twice from the same developer. The truth is people face similar issues every day but no one hears about it. I'm glad that some people kick up a lot of dust and make the issue visible to everyone.
Per my anecdotal experience, they are really good at choosing the outcome that benefits them the most/harms them the least - which wouldn't upset me since most companies do this, but it's Npm's "we're here for the community" type of fake attitude that has always bothered me.
You can't just trademark 3 letters in a way so that nobody else can use them. In fact there's hundreds of trademarks that are the letters "kik" in various logos[1].
What they trademarked is a bunch of specific logos containing those letters. Doesn't prevent other people from also using those 3 letters in some other way.
In fact when he wrote "kik", my first thought was the he was talking about the German textile discount store - which is the first result for me when I google those letters.
I'm shocked to see that something like this could happen on npm - where a single threat of getting lawyers involved can get your package transferred away from you. It really wants to make me not publish anything on npm too actually.
They removed that permission to limit it to only Pushbullet, and then were able to get back on.
I'm not saying there couldn't have been more hand-holding - but it wasn't exactly like it wasn't for a fairly egregious security breach.
(Disclaimer: I work for Google, but not in any Chrome/Android/Store team, or anything even vaguely related to that - this is purely my own opinion).
We all know that Google's support sucks, even they know it very well, just they don't give a shit. Everyone's pissed about this for years - anyone who ever tried to debug adsense, gmail or youtube account getting blocked out of the blue, or android app being flagged for no reason has gone through pretty much the same process this guy describes. Internet is full of horror stories of this kind, it's very well documented.
The only difference here is that most of us goes "c'est la vie" ¯\_(ツ)_/¯, and we continue using their services because - well - everyone else does it, what else could we do... while this guy doesn't mind giving them the finger... which will, and of course he knows that, hurt him much more than Google - but that's a move to be respected imho...
OK, so the is more to it than that and he did have a genuine grievance (I forgot exactly what) bit in dealing with that he caused a pile collateral damage for innocent bystanders.
(Innocent bystanders who errantly put too much faith in dependency oriented programming which brings us back to the broken system)
Npm not only didn't realize that this guy was more important to their community and NodeJS on the whole than a one off from Kik, but they sold out to GitHub / M$FT.
All that for something that hasn't been updated in 2 years https://www.npmjs.com/package/@kikinteractive/kik
"Oh I didn't know there was a company with that name" well, now you know. How would you like to go into NPM and find someone has created a package with your or your company's name?
At the same time Kik's answer of "we're nice people but we're sending the lawyers" does not come across as friendly.
And yes, NPMs response is not surprising. They're going to side with the trademark owner, unless there was a very good reason not to (like the MikeRowSoft case)
Note to npm (or some future package repo site): create package namespaces. Allow renaming and maybe aliases.
I have a friend who encountered a similar scenario with a company claiming trademark on a name. In their case they simply changed the package name. It was frustrating but it meant everybody was able to move on without any drama. Subsequently, as far as I'm aware, the trademark holder has never even published a package under the original name. So I suppose that makes it doubly irritating, but such is life.
I think your suggestion would have neatly avoided a lot of these kinds of issues in the first place.
Granted, all I know of the author is based on what I've seen of his past behaviour. That does make me a little sceptical that his account of events represents the sum totality of truth around the situation. I don't believe that's an unreasonable perspective.
It does not mean the account is false, or that I lack sympathy for him[1], or that I'm unwilling to see or understand his point of view. What I was concerned by is that in the comments I was seeing nothing but unalloyed support, which I did not think was warranted based on what we know. I think I've been pretty clear about that.
I also think it's a shame that he's chosen to yank the extension, but that's obviously his choice and I can understand why he made it.
[1] Different context entirely but I've had my own issues with Google's algorithms, along with the sense of being left in the dark about why. I made some, actually useful, changes but I've still no idea if those are the reason the issues were resolved. Regardless, I'm glad that they have been resolved.
Your own comments come out as one-sided as anyone can be...
It feels like to me that they have just become a sprawling mass of interconnected yet disjointed divisions but without any real customer service department that can handle the amount of requests or situations like in OP. I am not on their side in any way, but Occam's razor and all, it just seems the most likely explanation to me is that they are just too cheap to pay people to handle the volume of customer issues they have? Or would it not be economically feasible? What do y'all think?
[Edited to divide into two paragraphs for slightly easier reading]
Undoubtedly, for the Chrome Store as well as all of their other properties.
Ultimately, Google's business model is about earning fractions of a cent per view/download and making it up in volume. Their profit margin depends on relentless cost optimization, and humans are inevitably the most expensive part of their support/maintenance systems.
Google undoubtedly doesn't want to put extension writers out of business, but if they adjust their procedures to give cases like this real human attention then they will undoubtedly allow a few dozen spammers/scammers to also receive human attention.
(Note: I present the above without judgement. If I were to add my judgement, I'd say that I don't think that this state of affairs is a good thing, and in the long run we may need to reconsider whether algorithmic promotion of content without human oversight is viable.)
That's fine but at least have a human review before taking disastrous actions like taking down extensions, lockdown Gmail accounts. If you can't afford even that at least have an appeal process where human would review the case. If you can't make the economics work even for that maybe just don't run the app store.
Actually, the way they've expanded their range of products I'd wager they've put quite a few people out of business. It's especially bad if your business happens to not be one of the ones they acquihire, but one of their competitors, as evidenced by a handful of antitrust lawsuits.
Now do that for every app and extension. And repeat it for every single version that is ever uploaded.
1. Non human (AI) usage for termination google accounts. 2. No repeal process
At least some employee from Google here in hn must do things and understand mentality of other people.
It increasingly looks like - well... we employees live in bubble but if you are unlucky then you are screwed. Do not ask us?
What kind of programmers wrote such code that terminates account without human intervention? Please do not blame it on Project Managers.
You are human - so is some one that was affected by your code.
Amen
And even if they do understand your situation, and have authenticated you, and aren't just reading a script, then most of the time they can't offer you anything else besides what's possible on the website anyways. Sometimes we just like having someone to complain to.
With Google's bot approach that can never happen. The only way to escalate issues is to be famous and write a blog post or tweet about it.
Also, I bet no one think all will be well, without KI, but it will be better dealing with incompetent, overworked and underpaid call workers, than dealing with a "smart" KI, with you cannot talk at all. In the first case there is at least the hope, that someone escalates the problem to someone with more knowledge who can finally solve your problem.
The Human mind has an infinite capacity to justify any manner of things as "just doing my job" or "just following orders"
This has been seen in all industry, in all types of roles and at all times in history
There is nothing more dangerous than a group of people "just doing their jobs"
I tried again the next day, same results. That was 4-5 days ago, and still nothing. I'm abandoning Google Voice because I assume Google has abandoned it. It's not like there's anyone I can ask.
This is just an inconvenience to me. I can't imagine what it's like to have a service I actually rely on and then lose it.
It's getting more common, too. Just the other day I found out that posting links in a youtube comment makes the comment invisible to everyone else. In hindsight, disallowing links is almost certainly a good policy and it's easy to understand and appreciate why it was put in place, but why the gaslighting? Just pop up a box explaining that links aren't allowed. The gaslighting isn't going to fool spammers for long enough to be a meaningful deterrent, but it is going to trip up legitimate users enough to meaningfully degrade their experience.
Time to visit my bitwarden and port another account off gmail (my late new-years resolution is to port an account off gmail every time I get myself worked up about something google did -- funnel the useless frustration into something worthwhile.)
If you need to depend of them for a specific service, don't. Go with an actual business that cares and have the focus on what's important, and more importantly a customer service that listens.
I went with a dedicated VoIP provider, and the service has been excellent
In 2010 I was able to have one number ring multiple phones, automatic transcription of voicemail, text people from a web browser (!), switch between network providers without having to deal with number porting, it was great.
What killed it for me was that MMS was silently dropped, no images, but worse group SMS was handled by MMS so if people added you to group chats you just wouldn't get any of the messages and they would have no indication that you weren't getting them.
This went unsolved for years.
Eventually iMessage, Signal, WhatsApp, Facebook - basically everyone else took this market. Then Google started some anemic work on it again, along the way making and killing a bunch of other chat products that all sucked in different ways.
Along with google plus and cloud, this is probably one of their biggest strategic failures.
One who gets paid half a million a year to not question the policies and their consequences and just does what they are told?
So every bad idea eventually gets implemented.
The real tragedy is that we decided to let corporations grow so big that they can say "fuck you" to courts and people alike with no repercussions. Twitter is famous for this, ever tried to appeal a ban?
It's pure incompetence.
I know there are benefits to having someone vet browser extensions, but it seems a shame that they remove the self-distribution option completely when their moderation is so ineffectual.
Then extensions started being a spyware / malware delivery mechanism, with popular ones being bought and turned overnight. Coupled with browser plugins shoved down on the user's throat by various Windows software, this made Firefox unusable, at least on Windows.
It's why back in 2010 I started recommending Chrome to family, because Chrome installations kept being clean. It's why we can't have nice things.
Yep, Google is certainly protecting us from companies that do that.
Slowly but surely, the people handover their rights and are shocked by the power the dictator "suddenly has."
When the chrome team was tightening their grips on chrome, people here hailed the move because some windows programs like anti-viruses, download managers and adware sideloaded extensions.
We do keep giving power to some system because they "protect us" (Google and Apple in 2010) but there's always a chance that they'll stop caring once they don't need your support anymore.
Microsoft is also trying to buy our support by being benevolent, I wonder how long and if that will last.
Will these individuals continue to be putting Good Ideas into production indefinitely or is there some sort of immune response inside Google?
I have no interest in a scape goat or anything like that, I'm just curious if there's a way to incorporate the real-world consequences of choices like this into who is empowered to make choices going forward.
In a tiny company, a large failure can easily be the end of the company, so they're far more motivated to care about things like customer happiness, etc.
This story is about infra, but it applies just as much for product.
The VP made a boatload in a bonus for outsourcing a major group with expensive Seattle engineers and offshoring it. Then the company paid millions to the FCC in fines for the fuck up. He kept his job.
Saw this cycle repeated all over, VP replacing expensive hundreds of millions in telecom equipment then go working for that vendor as a VP for them cough nortel cough...
Shit kept moving along, saw VP's back in the day push for the expensive per minute charges on low income phones while allowing the cheapest rates or inclusive long distance for normal users. The costs to keep the extra expensive billing and bad press of gouging the poor was ignored util it made the news. Shrug, change policy, nothing to see here.
Google is losing Joe Rogan due to censorship, while Google is running off their most watched creators due to guest censorship. Theres even people making plugins to get around googles censorship (msm channel blacklist, pockettube, etc).
The whole control angle of companies strangles customers and developers to create new platforms, bad mangament is a great opportunity for startups to take on these issues and grow into major companies. Spotify is just the modern day Napster. Bitchute is a wayward home for censored conversations. Paypal decided to ban people for politics and now dozens of companies are biting into their market, Square/Stripe etc.
People are tired of being controlled by FANNG companies, nextdoor took off due to facebook, companies are trying to keep the afloat with the largest consumer base, but once the market is shattered with fleeing/banned users and customers, new companies will pop up. Myspace tried to control the market, facebook took over, now facebook controls what you see in your feed, and people flee, so facebook buys up the startups people flee too.
Tiny companies fill the need, we just need to make sure they get funded to continue and grow, crowd sourcing is one area that helps.
I'm loving that hackers and programmers who hate being told what to do and how to act, are coding and design ways around this problem. Chrome extensions is a good idea, but soon google will ban them, Dissenter as an example. When chrome is too controlling people flee to the next browser. Look at how many browsers there are now doing what Google is lacking.
I cant wait to see what people build to rebel against "the system", and theres now methods to fund them, the future looks great. Everyone keeps talking about the same issues, as if its an accepted fact, then someone comes along and builds a platform/app/extension that fixes it.
And people move on...
Like, if you were a former Googler or someone who'd been through their customer-support wringer, and you had some contacts, you could set yourself up as a consultant for small-scale Google account holders who run into this. Charge a fee for access to your higher-tier contacts, maybe even sell "Google insurance", a group of small devs could pool some money to pay for access to Google support when the hammer randomly falls on one of them.
This idea brought to you by my experience with various government bureaucracies, which are nominally publicly accessible, but, due to under-staffing and high demand for services, are more productively approached through the right kind of lawyer.
There are organisations that already work like this in many countries of the world. That's usually what we want to get away from.
New hotness: Google unexpectedly cancelling other peoples' products.
I wonder what both AWS and Azure have that google does not???
We had similar issues with the Google Play store for the ArtStation App (https://magazine.artstation.com/2018/12/happened-artstation-...), it simply got taken down and appealing continually got rejected. It was only after the issue got picked up as the top story on Hacker News and other sites that exposed the dysfunctional nature of their moderation that finally Google subtly changed their policy so that if the content is primarily “artistic” it’s allowed, but the catch is that only they deem what is appropriate and not...
We recently updated our Chrome extension also and it just seems to me that not a whole lot of effort is going into the Chrome Web Store, at least on the developer side where you update the extensions.
I hate regulations but I am of opnion that if you are a platform that other people use to make living then you should be regulated. Don't be platform of you cannot provide processes to handle appeals or able to pay massive damages in case of false positives.
For now, I will stick with webdev.
This is also so terribly common. I had a Twitter account get suspended for 2 months...with no explanation. I appealed it but it still took 2 months. What if that had been my main source of revenue? They restored the account without much explanation.
We really need _real_ people to make decisions like this. Oh it's not scaleable? Then maybe it's not a product you can sustain.
I'm not saying that people who did are in the wrong, but yeah, don't do that. Likewise, it is very risky to have Youtube as a unique source of revenue, etc. Or even to diversify but across the same platform company/holding...
You should not take such critical dependencies even if they had real people doing proper reviews, because they can very well change their terms when they want, in unpredictable ways.
Same with me. If I lost my Twitter account, I could rebuild it -- my _actual_ following at the time had more to do with my blog and RSS (miss those days :( ); however, it shows that you can't really trust that an account is yours or that as long as you follow rules, you get to keep using the site. Or that you'll get a "fair trial" when you're accused of breaking rules.
It doesn't help that these companies also punish you for getting accused when they _do_ have manual review. One of my photos on FB got mistakenly flagged, reviewed and approved that it's fine, and I still had a 7-day ban from posting/commenting. Youtube has that 3 strikes rule or whatever where if you get accused 3 times or more of copyright infringement (even if false and retracted), you lose monetization.
I had the same problem with a Chrome extension for my side project Defero (school information system). It uses InboxSDK to integrate the Defero address book with GMail. Unfortunately, it got flagged for security review and it kept getting rejected no matter what I changed. I ended up concluding my authentication mechanism and/or my use of InboxSDK was causing problems so I'm going to try changing the authentication mechanism.
But working with the Google to try to get it fixed and finding the cryptic warnings they hide in various parts of the developer console has been extremely annoying. I don't blame you for your decision.
Amazon suspiciously says browser extension Honey is a security risk, now that PayPal owns it
https://www.theverge.com/2020/1/9/21059083/amazon-honey-brow...
I'm the person building it, so please let me know if you have any questions.
Thanks for the tag. Looks like the author's core issue is (understandably) with the construction of the system itself. I'm not sure what I can do here other than listen and reiterate that we are trying to work to address these issues.
- https://twitter.com/DotProto/status/1264331488029376513
A month ago he said:
For context, we're currently planning to create a team that will respond to escalations with more meaningful information about a rejection.
- https://groups.google.com/a/chromium.org/d/msg/chromium-exte...
But the situation only appears to be getting worse and no one at Google appears to care enough to do anything about it.
I have an extension that is once again in rejection form mail purgatory and it makes me want to take my extensions off of the Google Chrome Web Store as well.
There are only a handful of extensions that are deal breakers (the lack of which would send users to other browsers). uBlock Origin, for example. All the others can fuck right off.
1. When (not "if") Google kills UBO 2. How Chrome's market share doesn't drop
People give shit to Jeff Bezos all the time, but compared to Google, there is no comparison to the level of company-wide user hostility and blatant privacy violations with such little public accountability, as that of Google's.
> "Google's Chrome Extension team has been giving me a complete nightmare since last two years."
What if the extension violated some policy that he either overlooked or is not publicly stated?
I would guess there's something in this extension that looks very similar to suspicious activity (regardless of whether it is) and some light refactoring would resolve the issue of repeated flagging.
Not suggesting this is right or good, but it's probably less time consuming and more effective than emailing back and forth for two years.
With the new Edge supporting Chrome Extensions, I wonder if some of these devs are going to move their extensions over to that or do like Kosmos and just move on to some other project that is outside the reach of Google.
All in all it is sad to see Kosmos go, I used it back in 2017 and really liked it. I didn't make the jump to the paid version but it was a well put together extension and solved a problem I think many users have.
If you MITM your own browser you can do whatever you want without an extension (that's almost a hostage to browser makers.)
I feel Google, Facebook and Twitter need to take a big step back and stop antagonizing paying users: be it developers or advertisers. A majority of the issues stem from horribly strict enforcement of policies. What these sites expect from us mere mortals is to do a tightrope walk every time we create and launch something. And some of these policies are actually ridiculous. I understand the fallout of Cambridge Analytica has caused all these sites to give more importance to policy enforcement but the solution to that problem does not lie in automating it through use of technology alone. Business and people's livelihood depend on these policy enforcement. God forbid your business Ad account is shutdown for good because you used a word that causes some stupid algorithm somewhere trigger an automatic ban.
It has happened to me. And worst part is you have no recourse. I have spoken directly with Google Execs who were assigned to a client of mine for managing a big ad account. Even they were clueless as to why the system suspended the account. After a lot of digging around I realized that it was because I had used the same credit card in two different accounts. I mean really? Come on! I am lucky I had a Google Exec who was in contact with me because the client was high value. What would small businesses be going through if the same thing happened to them? I shudder to think.
All these sites need to relax with their enforcement of policies. Deploy humans for this. We already have a lot of unemployment due to this pandemic and this would be a great time to payback some of those profits by employing more support staff. AI is good but it is not good enough yet to have such levels of control.
</rant>
I've been reading these stories for as long as I can remember knowing about HN. People don't seem to quite learn that Google is a machine for printing money and unless you're paying them they don't care.
That might sound like a non sequitur but it's ridiculous to me how little Google cares about anyone (users or the people who make content for their platforms) yet we still use their products. These days I try to avoid them wherever possible, not only for a small satisfaction of boycotting the company, but also because if I grow to like one of their products it will just shut down eventually.
What can we do about this?
There is a much harsher solution that I'm not even sure I advocate yet: stigmatize employment there.
At-will employment somewhere when we can easily go elsewhere means that, while we don't necessarily condone all that our company does, we in general support/accept the company and its approach. Therefore, absent hardships, we must assume Google employees generally support Google actions as a whole (even if not this one). If others disapprove of Google's actions as a whole, they are allowed to disapprove of those that work there.
In my opinion, the best you can do is disapprove of working there (including passing opinionated judgment, albeit politely, on those that do work there). Maybe you take such character judgments in your personal or hiring decisions. Having said that, I don't agree with it as I generally support Google's actions/presence as a whole, but the further their average lowers, the more myself and others won't.
The truth is that it is become an enormous company and somebody working e.g. on the internals of Compose code has no power over how Chrome handles extensions.
I despise Google more and more as a company but that's not going to affect them.
In the areas where Google has some real alternatives, switch to these.
> What can we do about this?
I think you've already got it; don't use Google products. Ideally, pay for alternatives.
Not sure if this is yours, but mine was that it would often swap out my tracks for radio edits, even though I uploaded the original. I'm an adult, I bought this music, I don't need the kids' version. There's a built in feature you can use, "fix incorrect match," that would fix this only about half the time.
Oh right, it also capped the max size of playlists to 1000 songs for some reason.
Now it sounds like YouTube Music won't even let me listen while switching to another app, like a workout app, and won't let you turn off the screen without the music going out. Hard to believe.
Looking around, I'll be moving to musicolet I guess. Sounds like AIMP and BlackPlayer get good reviews too, but I really love the idea of an app that actually tries to limit the permissions it requests from you.
https://www.androidauthority.com/best-music-players-android-...
As for YouTube Music, it supports background play only if you subscribe, like regular YouTube.
Purchase software from other providers. With like, cash.
I've had the exact opposite observation here. There are few places on the Internet I see Google get more consistently browbeaten and held to account for its mistakes and abuses than on HN. This has been the case for at least the past six or eight years or more. Threads on Google here are very rarely laudatory; they typically make the front page because of bad things.
HN comments tilt toward overwhelmingly disliking Goliath and favoring David. You see this in most Intel v AMD threads from the past decade. You'd think Intel killed HN's favorite puppy or merged with Oracle. Intel having an inferior product now doesn't explain the visceral response, it's something deeper psychologically, it's a revulsion of big tech broadly. It's mostly just a matter of rooting for the underdog and against big tech. The same thing is common re Amazon and Facebook here (increasingly Apple as well, which has lost a lot of its favor on HN). Microsoft is slightly in favor by contrast, they took a very long big tech lashing previously and people like a comeback story (their open source olive branches help a lot).
Pretty typical, forever repeating psychology. Underdogs, comebacks, goliaths v davids. They won't like you again until after you fall.
It was like a revelation.
No longer were we tied to inflexible, command-and-conquer style platforms. We could fix bugs ourselves, instead of waiting for years for vendors to maybe fix the bugs we diligently reported.
We could distribute our own libraries and packages in minutes, with licenses of our own choice. There was no corporate gatekeeper standing in the way. (But what of security, you ask? Look at Lenovo and Superfish ... that was a MITM attack produced by the supposed gatekeepers).
Now it seems things have come full circle, and a younger generation of developers is discovering, once again, that writing software for closed, proprietary systems is a mug's game.
Only now, those platforms seem even more strongly entrenched, courtesy the mobile duopoly and web monopoly.
Seems like after doing this 2 or 3 times, I'd be making plans for a pivot or change to my business model.
Google is just an instance of the class. All of the instances of the class are subject to this problem. Fixing Google’s policies will not eliminate this danger.
Censorship platforms that do not permit the user an escape hatch (iOS App Store, I’m looking at you) are ultimately able to decide what we see, what we read, what we are allowed to think. They can disappear entire bodies of work without even a notification.
Do not use censorship platforms.
Instead of Kozmos shutting down, the best revenge would making a firefox extension and getting their users to switch.
Firefox and Chrome both don't let users install any add-on without their permission. Switching to Firefox ecosystem just means the leash is longer (and the protection is fake because of their automated signing portal).
The vast majority of people have forgotten that they aren't an email, webapp, cloud storage, or online translation provider. They are an advertising company. They use their products to steal your information. They aren't meant to help the user, because the user is not their customer. I'm sure you will get a real human employee if you are interested in buying ads from them.
Contrary to popular belief there are many companies that provide software besides google. Use them if you want a provider that might care about your problems. "It's not exactly the same as google ____" is not a valid excuse for not giving it an honest try.
True from a naively pedantic POV, but also ignores that betting odds happen to end up efficient also. Like saying shopkeeps set prices to drum up business and aren’t subject to the principles of supply and demand.
Google is an advertising company, but as part of its strategic goals it develops a high quality email client that beat out competitors on its own. I bet you the Gmail team is full of brilliant people who don’t give a shit about advertising and just want to make an awesome email client and spend night and day thinking about just that.
I think this story is better told more simply, that when a company gets big it becomes arrogant, bad at social awareness and serving anybody. I'm sure you can find advertisers or would-be beneficiaries of what you call "data theft" that are fed up with Google breaking their stuff too.
Seriously, I am slowly and surely de-googling, such as storing all data locally (if I need offsite, I use encrypted backups). My calendar now uses caldav on a raspberry pi, my home network uses ethernet for fast data flow to a portable drive and I am using a web browser for many applications such as email; I use noscript and nextdns to selectively control my browsing experience. SSH is powering everything, including being able to access the device from any client connected to the network and if I wanted, from the internet as well (which can be quite useful, needs to be done sensibly however).
It's possible, but it does require effort, staying power (when installing a python package doesn't quite work because python 2/3 still...sigh) and is, quite simply, not something the average home user cares about.
Do they care an enforcement agent can access your documents via a warrant? or your metadata? or access your 'social circle' or profile you? Honestly, not really. But my threat model is that Google can and will use their AI army against you, and if you are unfortunate enough to get caught by them, there's little regards to you as an individual.
I can't risk my data being in a service with such little regard to humans, it's not acceptable and frankly, hosting everything myself is safer, more rewarding from a learning experience (such as how linux works and certain design decisions that are both good/bad and can be frustrating).
go de-google, it's a worthwhile venture.
[P.S: in a previous life I was vastly pro google. I used location history for years, google pay, play store, play games, stored youtube history and the whole works. Thanks to Snowden and forums like reddit/hackernews, I learnt that this was foolish. Giving up my data, for free, in return for little value back (why give them my financial information, for what? Google Pay is no different to my contactless card and that goes to bank directly). Cutting all these data flows was refreshing, and is part of the plan to delete or make my account dormant altogether. I am vastly more pro-privacy and take strict measures to reduce my digital footprint, which is entirely possible but requires additional effort, where the temptation of letting the "nice guy" handle all the work is always there. Paying in cash is still a thing and leaves less of a trace to 'you' as a person than digital]
This is all well and good, but they cornered the market for email, webapp, cloud storage and online translation products (and most importantly smartphones and web browsers). So until there is a viable alternative that the average person knows about, this will not change.
But they are: all of these are paid services Google offers. Presumably if you pay you get a different level/kind of support?
Bureaucracy and customer support problems with large companies is not a new or unique to Google.
Everything else is a loss-leader or a rounding error.
That’s a fact. Speaking from personal experience, Google Ads/Admob seem to be the only services where human support exists.
They lost their way but keep riding their initial wave.
They aren’t stealing from me. I get to watch YouTube videos, store my files in Drive, and use gmail — all things that I like quite a lot. Yes there are alternatives to gmail and Drive, none of which are good enough for the hassle of switching. There is no YouTube alternative.
But if we are to accept the author’s central claim that it was reviewed and accepted by humans many times in these two years, the why isn’t really important. IMO it would just make the story more interesting, not critically different.
Now if you have reason to think that central claim is bullshit that’s another question.
PS: also in this types of automated triggers, getting to know what triggered the warnings is in itself a pretty hard task. I think a number of extensions just get removed without ever knowing exactly why it happened.
Let's hope that antitrust agencies will finally investigate them on this subject!
When you're on the receiving end, the actions of Google are indistinguishable from those of traditional bureaucracies except that instead of training people to follow scripts, they have bots that take care of things automatically.
Unfortunately for us humans, Google's model of automating the disregard seems sustainable and profitable.
But having said that, if you're considering switching you probably also want to consider telling your paid customers how to install your extension themselves, rather than sending them over to Google's extension "store".
THIS IS WHAT YOUR COMPANY DOES.
This among MANY other reasons is why people are pissed off with you.
When are you going to fix your toxic corporate culture?
Google briefly disabled my Google account last year, and it spooked me. I had created a "brand account" to use with YouTube, and for some reason the new account was flagged for suspension within the first day. I was annoyed, but it didn't bother me too much, and I submitted my appeal (aside: I always feel wonderful having no clue what I'm appealing - I'm pretty sure even the Soviet Union or Nazi Germany would have given me the dignity of knowing what I'd been convicted of before the trial + execution/Gulag). Two days later, I woke up to two emails from Google: the first indicating that my main Google account - the one where I have my email, several domain names and YouTube TV - had been suspended; the second indicating that the team reviewed my appeal and had found I hadn't violated any policies and my account had been reinstated, but that I'd need to login soon. I logged in posthaste and found that my brand account was still disabled, but at least I could read and backup my email. (At the time I also happened to be in salary negotiations with my then-client and now employer. Really wonderful timing.)
I tried to submit another appeal on the brand account suspension, explaining that I'd received a reinstatement email referencing the original ticket number, and that all their team had done was erroneously disable and reenable my main account. This time, I got a response saying that I already had an appeal pending so I'd need to wait for it to be resolved. If I really cared that much, I could have tried again to explain again that actually it was their mistake, yada yada, but it wasn't worth it. I didn't want my account to be suspended again with very little recourse other than trying to use my network to get something done internally. Like with a corrupt cop, the prudent strategy was to just walk away and avoid conversation.
I've since stopped using Chrome, and I find that I prefer DuckDuckGo to Google (DDG feels like Google Search used to before $GOOG started blindly trusting deep learning to solve everything). I have hardened my resolve against ever touching an Android device, and I use an adblocker zealously. I haven't fully moved my mail or DNS stuff away, but I am much more cautious. I didn't realize in 2004 when I signed up for Gmail that I'd be entrusting my life's records to an organization that makes the DMV look like an expert at efficiency and customer support.
I'd hope that OP and the various other developers here could maybe band together and maybe consult a lawyer. I have a feeling that given the legal realities of discrimination law and the like, Google's policies and enforcement procedures are bound to be in violation, especially considering the law in its home state. Google's behavior is not merely evil in these cases, but evil and incompetent.
Postmortem and lesson learned: Don't make yourself dependent on BIG_COMPANY when building a product
What I don't understand is why the GDPR doesn't enforce the following:
1: Clear and concise information about the action being taken, and clear identification this was done using automation and did not involve any human oversight.
2: A process the user can invoke to request human intervention, and a confirmation email that a human will review the decision that was made within 30 days
3: Public statistics and transparency - any decision that was made that did not involve a human must be published, with stats on % of decisions made, number of cases flagged to human reviewers, and the success/failure rates (for example, number of cases resulting in an overturned AI decision by a human).
This could also be beneficial in other sectors too, like automated credit decisions and insurance policies, to publish statistics and data to afford transparency and identify possible biases. It should also be a requirement in law to preserve any code or algorithms should they need to be audited, including an AI system to be preserved "in time", so that the 2017 version can be audited in 2020 if an investigation is launched for example.
Right now, it's a complete free for all, too many edge cases and ways to game the system if you can figure its loopholes, and no requirement in law to provide a fair basis for users to appeal to a human without causing a PR shitstorm.
This early adoption of AI is quite bad, and I suspect we'll see such developments in the long term future as it matures.
[1]: https://ico.org.uk/for-organisations/guide-to-data-protectio...
This Regulation lays down rules relating to the protection of natural persons with regard to the processing of personal data and rules relating to the free movement of personal data.
No snark, this situation sucks, but after dealing with GDPR for a while it's not well understood in tech societies
Every nightmare story about accounts being disabled by a bot, or Adsense payouts being canceled, or apps taken out of the App Store, or extensions being shutdown, all done by Google engineers or outsourced workers.
These Google people are doing it because they can and because they are jealous of others’ success. They are also doing it because Google has lost their way in the last few years and they are bored, among other reasons.
They also continually screw with web site search results to harm certain sites, individuals, and companies for much the same reasons as mentioned above.
Trust me when I tell you that there are no bots behind these final decisions. It’s being done by Google engineers and their outsourced workers.