Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×
Google

Bennett Haselton: Google+ To Gmail Controversy Missing the Point 244

Bennett Haselton writes "Google created controversy by announcing that Google+ users will now be able to send email to Gmail users even without having those Gmail users' email addresses. I think this debate misses the point, because it's unlikely to create a deluge of unsolicited email to Gmail users, as long as Google can throttle outgoing messages from Google+ users and terminate abusive accounts. The real controversy should be over the fact that Google+ users can search a public database of the names of all Gmail users in the first place. And limiting the ability of Google+ users to write to those Gmail accounts, won't do anything to address that." Read below to see what Bennett has to say.

To begin with, remember that on Facebook (which I no longer use, but which I keep up with) does allow you to search for other members' names and send them messages even if they have not yet accepted your friend request. Facebook users are generally not shy when it comes to complaining about problems with the site, but I've never heard Facebook users complaining about junk messages from strangers. (It's true that if you get a message from a user outside of your friends list, it gets routed to the "Other" folder of your Facebook inbox. But similarly, Google says that messages from strangers on Google+ will get routed to a Gmail user's "Social" tab of the inbox.)

So I expect the amount of actual unsolicited emails from Google+ users to Gmail users to be almost a complete non-issue, for the same reason that it's not an issue on Facebook. I assume the reason that Facebook users get so few junk messages, is that Facebook can limit the number of outgoing messages sent per day by any one account (although I don't know what that limit is), and can shut down accounts that are reported for abuse. Yes, a spammer could continually create new accounts to send more messages, but if you create too many Facebook accounts from the same IP address, and each account created from that IP address gets flagged for abuse, Facebook might start disallowing new accounts created from that IP. You could switch your IP address continually, but at a certain point, spammers must have decided that creating disposable Facebook accounts for spamming purposes wasn't worth the trouble, because the simple fact is that they don't do it. So Gmail users are not in danger of buried in spam from Google+ accounts. (By contrast, conventional email spam grew to unmanageable proportions because anybody with an email server could send out millions of messages per day, unless their provider cut them off.)

On the other hand, I think we should be more concerned about the fact that anyone who creates a Gmail address automatically has a Google+ account created for them. This doesn't just mean that any of Google's claims about the "number of Google+ users" are inflated, if they're including everyone who signs up for a Gmail account. (That's a valid complaint, but it's between Google and their shareholders, since the rest of us don't need to care how many users Google+ actually has.) More importantly, it means that all of those users become part of a public database that is searchable by name.

As a test, I went to Gmail.com and created a new user account, entering the first and last name "Zanzibar Higglesbrain" which I figured was probably unique. (Fan fiction authors: knock yourselves out.) Then I logged back in under my own Google+ account, went to the people search page, searched for "Zanzibar Higglesbrain", and found 1 match. (I didn't even need the exact name -- entering "Zanzibar Hi" into the people search box, listed Mr. Higglesbrain among the results.)

Now, when I created the Higglesbrain account, how much up-front notice was I given that I would be adding myself to a public database? I went through the normal signup process, viewed through the eyes of a novice -- after typing in Gmail.com, I was redirected to a page on accounts.google.com with the innocuous title "Create your Google Account", and entered my personal information. On the next page is the somewhat confusingly worded message (I've also posted a screen shot here):

How you'll appear

Choose how you appear across Google by creating a public Google+ profile.
Include a photo - you can update it at any time.
[Link:] Add a photo
[Button:] Next step

This message is misleadingly worded because the phrase "by creating a public Google+ profile" implies that's something you can do, optionally, if you want to. It doesn't really disclose the fact that the profile is being created for you as a side effect of signing up for Gmail. The wording might be interpreted, rather, to mean that your profile will only be created if you upload a photo (which is not the case; your profile gets created regardless). And besides -- what if the user is a novice who went to Gmail.com because they saw all their friends using Gmail.com addresses, and have never even heard of "Google+"? If they haven't consented to their name being added to a publicly searchable database, it shouldn't be their responsibility to know what "Google+" is, so that they can object to their name being listed there.

After you click the "Next step" button, the final page in the account creation process says:

Welcome, [firstname]

Your new email address is [address]

Thanks for creating a Google Account. Use it to subscribe to channels on YouTube, video chat for free, save favorite places on Maps, and lots more.

Note what's conspicuously missing from this message: It doesn't mention Google+ at all, much less the fact that you have unwittingly "joined" it, where other users can find you.

I can think of a couple of scenarios where a user might object to their name being listed in a searchable user database, apart from just "on general principles". If you have a stalker in your past, and they find your name on Google+, it confirms for them that you're probably still alive, that you're probably active on the Internet, and that you're still going by the name that they knew you under. Or, if you have a very unique first name, anyone who knows it could search on Google+ to find your last name, even if you didn't want them to. Similarly, if you have a very unique last name, someone could use the search feature to find the names of your children and other relatives with the same last name, at least those of them that are using Gmail.

And this lack of user consent is a more serious problem on Gmail/Google+ than on Facebook, because most Facebook users create a profile with the general expectation that other Facebook users can find them. Some Facebook users had chosen not to make their accounts searchable -- and Facebook justifiably received a firestorm of criticism for removing that feature and forcing those users' profiles to become publicly searchable after all -- but the overwhelming majority of Facebook users had joined with the understanding that their profiles could be found by others. That's not a valid assumption about Gmail users -- if someone creates a Gmail.com email address, there's no reason to think that they believed they were joining a publicly searchable name database.

Google has tried to mollify people's concerns about emails from strangers on Google+, by specifying that anyone not already in your Google+ circles will only be able to send one message to your Gmail inbox, and will not be able to send more messages until you reply. But this misunderstands the privacy implications in, for example, the stalker scenario. If a stalker ex "Bob" really did find your name on Google+, they might try to tease out a reply by creating a Google+ account under the name of a friend "Alice" you and your ex had in common, and sending you a generic "How have you been doing lately?" message. Since that message probably won't raise any alarm bells (the message isn't asking for anything like a current address or phone number), you might not realize that just by replying, you've already done the damage (the stalker now knows your email address, plus the fact that it's still an actively used account).

Similarly, although you can modify your Gmail settings to prevent strangers on Google+ from messaging you, the ability to change a setting to fix a problem only helps a user if the user realizes when the problem is happening. For example, if the problem resulting from this new feature switch were a deluge of spam from strangers on Google+, then more and more users would get frustrated and look for information about how to stop the flood of spam, and most of them would find out about this setting and switch it off. But for combatting the stalker problem, this setting is useless, because by definition if a stalker finds you on Google+ (and tricks you into replying to a message and revealing your email address), you wouldn't know about that problem until the damage has already been done, at which point it's too late to solve it by changing a setting.

The only way to avoid this risk to people's privacy, would be for Google to ask Gmail users at the time they create a Gmail account: "Do you also want to create a Google+ account, yes or no? This means you will have a publicly searchable profile, and people who know your name will be able to find you." Some people would like to be found, some people would rather not be, and this would allow them to sort themselves properly.

But instead, we have an untold number of zombie Google+ accounts created whenever someone signs up for Gmail, which serve no purpose except to make it possible to find people who never confirmed that they wanted to be found -- all most likely for the reason given by Chris Taylor at Mashable, so that "Larry Page gets to claim increased Google+ user numbers on the next quarterly earnings call."

This discussion has been archived. No new comments can be posted.

Bennett Haselton: Google+ To Gmail Controversy Missing the Point

Comments Filter:
  • Bennett Haselton? (Score:4, Insightful)

    by Anonymous Coward on Monday January 13, 2014 @12:12PM (#45940139)

    Who is Bennett Haselton, and why do we care what he says?

  • Google plus (Score:5, Insightful)

    by sTERNKERN ( 1290626 ) on Monday January 13, 2014 @12:13PM (#45940141)
    Just make it stop. I go to G-Mail to send mails, I go to Youtube to watch videos. If I wanted to socialize, I would have gone to Twitter/SnapChat/Facebook/MySpace (is there still such a thing?)/SecondLife... Google was famous for it's tools being simple, powerful and not forcing anything on the user. Good old days, eh?
  • Re:Google plus (Score:5, Insightful)

    by TrentTheThief ( 118302 ) on Monday January 13, 2014 @12:18PM (#45940203)

    I agree with your views. Google has jumped the damned shark.

  • by Anonymous Coward on Monday January 13, 2014 @12:23PM (#45940265)

    One of the reasons i hate Google, along with Facebook and MS and Apple and many other software developers is the forced changes. If this is so good, why not explain your reasoning and allow for an opt-in? Why must we be forced into some sort of change that we don't want or didn't ask for? It's funny because there are so many Google fans and Apple fans and what have you, but these big monolithic software developers don't care who you are or what you want; they'll force changes on you to their own benefit and F you if you don't want it. /sigh. At least hosting a domain isn't all that hard; time to use my own email.

  • by fast turtle ( 1118037 ) on Monday January 13, 2014 @12:26PM (#45940285) Journal

    It's the easiest solution and works across all of Google if you simply check the god damn box on the profile page to disable listing/indexing your gmail addy by Google and if you didn't do it during the initial setup or soon after Google gave us the dashboard, you deserve what you get

    God damn posting filter - saying I'd posted 47 minutes ago when trying for AC - /. is going to the nuking cockroaches

  • by Dupple ( 1016592 ) on Monday January 13, 2014 @12:27PM (#45940311)

    That's very naive. What it means is that Google collects more private data, meta data they can cross reference to target ads and still hand it over to the NSA upon request.

  • by i kan reed ( 749298 ) on Monday January 13, 2014 @12:30PM (#45940337) Homepage Journal

    Maybe it's because things were changed after they signed up for an account? Without their permission? In order to cross promote a product no one wants?

  • Re:Google plus (Score:3, Insightful)

    by Arker ( 91948 ) on Monday January 13, 2014 @12:34PM (#45940373) Homepage

    "Not only is G+ not forced upon you, at all, but it's one of the easiest social services to delete your account from, removing ALL your history (every post, every reply, every picture, every single trace of your existence). And to top it off, it allows you, before you delete your account, to download a .zip file of all your posts, if you want."

    Says the AC with no link.

    IT certainly has been forced on me and if there is an option to delete it short of deleting my accounts on gmail and youtube (which seem to have been merged without my consent) in the process it's far from obvious.

  • Re:Google plus (Score:5, Insightful)

    by gl4ss ( 559668 ) on Monday January 13, 2014 @12:39PM (#45940425) Homepage Journal

    haha that's like saying that you're not forced to give the government your photo.

    sure you're not. unless you want to drive.

    anyways, all this shit is pretty much because nobody wanted to use google+ - but some jackasses had their bonuses tied to the user numbers, so those jackasses then made it so that if you want to use youtube, you'll be a google+ user - and now every new gmail user is a google+ user.

    they're just playing a stupid numbers game. this wouldn't even be a problem if they had not along the way fucked up youtube comments(and moderation of them) etc while doing it.

  • by Kerstyun ( 832278 ) on Monday January 13, 2014 @12:41PM (#45940455) Journal
    He sure is one wordy gentalman.
  • by SirGarlon ( 845873 ) on Monday January 13, 2014 @12:50PM (#45940573)
    It's not *your* information, it's information *about you.* See the difference?
  • by LordLimecat ( 1103839 ) on Monday January 13, 2014 @12:59PM (#45940663)

    Look at his past submissions if you want to know.

    Myself, Im partial to the one where he asked whether we REALLY need the 4th and 5th amendments.

  • by Dcnjoe60 ( 682885 ) on Monday January 13, 2014 @01:00PM (#45940665)

    If you want to know who he is, just look him up on Google+

    Better yet, look him up on Google+ and send him an email. After all, he states that this linking of Google+ and Gmail won't cause an increase of unsolicited email.

  • by Obfuscant ( 592200 ) on Monday January 13, 2014 @01:05PM (#45940725)

    Took me a while to get there. 1.Click on your icon (top right on my browser) to go to Account settings. 2. Click on Google + Settings

    Wait a minute. You have to use Google+ to set a Gmail account setting? I would never find that link because I deliberately do not use Google+. Yes, this is very easy to opt out of, sure.

  • by Arker ( 91948 ) on Monday January 13, 2014 @01:15PM (#45940827) Homepage

    "Wait a minute. You have to use Google+ to set a Gmail account setting? I would never find that link because I deliberately do not use Google+. Yes, this is very easy to opt out of, sure."

    Ding ding ding. This is how screwed up google has gotten. They sign us up for a new service without our consent, then demand we log into it to opt out of stuff we never opted into. And to do that... you have to consent to the TOS.

    It's a neat little trap they have constructed. Do no evil? Hah.

  • by Nerdfest ( 867930 ) on Monday January 13, 2014 @01:34PM (#45941035)

    It seems to me they're trying to move away from having gMail as the central account to Google+ being the central account. The problem is that people don't want that because Google+ is another social service (that you don't need to use, but that's what it is.) What they probably should have done is to have a simple Googler Account service that does nothing but contain your basic information and some gommon settings. Gmail, Google+, YouTube, etc are all just service that are associated with a specific Google Account. Peopl feel like they're forced to use Google+ because it's being used as the central coontact point and some want to have nothing to do with it. If you can be emailed via it, I can understand it, especially if this new capability is opt-out, which I think it is.

  • Re:Google plus (Score:4, Insightful)

    by Arker ( 91948 ) on Monday January 13, 2014 @01:44PM (#45941163) Homepage

    "I do agree that it is slightly annoying they don't have a check box to not create the G+ profile but it isn't like they automatically fill it out and push everything into it. "

    That does not appear to be correct. Since google+ came out a pic that I used for a brief time on google talk (and I made sure it was set to only ever display to people on my chat list) is now showing up on youtube.

    "You have to manually go to G+ and finish the process if you want it, delete it if you don't."

    And to do that you have to retroactively agree to what they did. Not reasonable, not acceptable.

    I have a better idea. Google should go back and delete all the accounts that have not consented, which they should never have created in the first place, and issue a public apology.

    "The poster's stalker premise is also pretty silly. If I'm being stalked am I really going to be dumb enough to create accounts with my actual name on them?"

    The TOS demands your real name, which would be reasonable if they were not misusing it. Besides which, what usually happens is the stalker comes first, and only afterwards do people learn to be more careful what information they let out.

  • by Hognoxious ( 631665 ) on Monday January 13, 2014 @05:47PM (#45944561) Homepage Journal

    It's quality, not quantity.

    The polar opposite of your stories then, you rambling windbag.

It is easier to write an incorrect program than understand a correct one.

Working...