Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Um, google is 1) automatically reading my mail, 2) noticing that I made an air travel reservation, 3) populating my calendar with the relevant times, 4) populating my calendar with a fake hotel reservation disguised to look as if I made it, and 5) sending both email and calendar notifications that I'd failed to confirm that fake reservation.

Items 1, 2, and 3 are ok, and are the feature

The fake reservation and "confirm" requests are straight-up deceptive trade practices - an attempt to steal money and change my travel plans by deceptive means.

For a moment, let's go with your idea that Google didn't do #4 & #5.

First, questions: When did I give Google permission to open up my calendar for anyone in the world to populate? Considering the levels of spam in email, telephony, & text, what idiot thought that was a good idea?

Aside from the deceptive trade practice, this is also a massive security risk - with everyone's calendar open to the world, and without advance warning, it'd be straightforward to route a person into a variety of dangerous situations if they aren't extremely careful - this is way beyond 'click the link ransomware', and up to 'go to the appointment in your ostensibly secure calendar and get kidnapped'. These are just a few quick examples.

So, either Google themselves is directly implementing deceptive trade practices, or they are stupidly enabeling all kinds of new cybercrime.

In short, if Google is actually enabling this kind of access for random 3rd parties, it is a WORSE intrusion than if they are merely doing it themselves.

Either way, I'd expect far more responsible thinking from such a supposedly mature company.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: