• 0 Posts
  • 11 Comments
Joined 1 year ago
cake
Cake day: June 12th, 2023

help-circle



  • The EU has no enforcement ability outside of their own borders regardless of what they tell you.

    So uh, you think Google doesn’t operate or do business in the EU? They have 20+ offices there. In the example I gave, they would 100000% be subject to GDPR, fullstop; it’s not a question, matter of opinion, or debate. They’d even be subject to it if an EU citizen was physically inside the US on vacation and opened a Fi account while they were here.

    You EU guys are brainwashed and gullible to a level on par with N Koreans.

    I’m from Virginia and knowing compliance stuff (GDPR, CCPA, PCI DSS, NIST 800-*, etc) is a requirement of my job.


  • Weird. In the email I received, I just clicked the first link and a page opened letting me know I had opted out.

    Yeah, not for me. It just went to the main Fi account page when I actually got it to open instead of it trying to open in the Fi app. Maybe an A/B test or something, I don’t know.

    What I do know is that I just switched wireless carriers, because fuck all that noise. That shit really rubbed me the wrong way. I might be on the road to completely divorcing myself from Google at this point.


  • Or just click the link that says to opt out. It will opt you out without doing anything else.

    There’s no link in the email to opt out. The email gives you instructions on how to opt out and a link to the Fi website, but no direct link.

    The instructions also don’t work by default, because once you log in to the Fi website, it automatically redirects you to the Fi app which conveniently doesn’t have the opt out option available to toggle. You have to either uninstall the Fi app or manually turn off its ability to open fi.google.com URLs to actually opt out.

    I don’t think that was an accident for even half a second, and I’m pretty sure that it just pushed me to switch carriers.


  • Google Fi is exclusive to U.S. customers so it doesn’t matter if it breaks GDPR.

    Yeah it does. GDPR applies for EU citizens regardless of where they are. It’s why every website in the fucking world has a cookie banner now. An EU citizen could register for Fi service with a VPN and a mailbox at a UPS store and Google’s handling of their data would be subject to GDPR.

    So yeah, it definitely matters, and I wouldn’t be surprised if they get sued because of this.



  • BTW, any authenticator app works when it tells you to use one. They all use a standard, so it doesn’t matter which one you use.

    Eh, it’s a little more nuanced than that, there’re more standards for MFA code generation than just TOTP.

    And even within the TOTP standard, there are options to adjust the code generation (timing, hash algorithm, # of characters in the generated code, etc.) that not all clients are going to support or will be user-configureable. Blizzard’s Battle.net MFA is a good example of that.

    If the code is just your basic 6-digit HMAC/SHA1 30-second code, yeah, odds are almost 100% that your client of choice will support it, but anything other than that I wouldn’t automatically assume that it’s going to work.