Forum Moderators: buckworks & skibum

Message Too Old, No Replies

Logged in - into what?

I really detest this

         

HitProf

12:45 pm on Jan 27, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



I just did a search in Google and saw my adwords login email appear in the upper righthand corner. This really annoys me. I logged into my AdWords account, nothing else, and I don't feel Google should use this login for anything else. I feel being spied on!

johannes

1:33 pm on Jan 27, 2006 (gmt 0)

10+ Year Member



I'm seeing this too, on google.com. I don't like either!

sem4u

1:37 pm on Jan 27, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Remember - you are logging into a Google account now, not just an AdWords one. Just log out before you search.

Frequent

2:39 pm on Jan 27, 2006 (gmt 0)

10+ Year Member



Oh, and you ARE being spied on.

Freq---

HitProf

3:02 pm on Jan 27, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



> you ARE being spied on

I know, and I hate it.

Of course we are low logged into the Google Account, but who needs a Google account for search? Not me.

I search all day and I use AdWords all day, logging in and out would just be stupid and time consuming. Luckily I have 2 different, not connected PC's on my desk...

Kings on steeds

5:23 pm on Jan 27, 2006 (gmt 0)

10+ Year Member



when you setup your google account, you are presented with a check box

"use account for personal search" or something along those lines, just dont click that button.

goto www.google.com/accounts and login the select the

Delete Personalized Search

link on the bottom left of the page, this will stop it.

HitProf

5:42 pm on Jan 27, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



All these services, including search, are below "try new service". I never asked for them anyway. Even if I wanted them, I'd use different login data.

jtara

6:04 pm on Jan 27, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



This is particularly confusing because of the need for multiple Google accounts for Adwords. If you want to use the API, you need at least two accounts - one for your Adwords campaigns, and a seperate one for the MCC. Then, if you have clients, or if you need to use multiple accounts for your own advertising (due to hitting limits), now you need still more Google accounts.

Then you go through the silly "convert to a Google account" on every account you set-up.

You need a seperate email address for each one, and your email address is your user ID. Email addresses for user IDs are WAY out of favor, due to phishing. Google doesn't display your email address to others, but it still makes me uncomfortable.

It's poorly thought-out, as is much of what I have seen from Google. I am reminded of the fable of the Emperor and his fine new threads...

jtara

8:59 pm on Jan 27, 2006 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Actually, the use of email addresses as login IDs IS a phishing problem, even though e-mail addresses aren't (directly) publically revealed.

If you post on Google Groups, you are vulnerable to phishing and email harvesting.

While your email address is not shown in the default view when reading groups, you can still get somebody's email address. View a message and click on "options". Choose "reply to author". In some cases, it will show the user's email address, in other cases it won't. (I can't figure out for the life of me where to turn this off.)

Even if the email address doesn't display, you could just send a private message to the author. If they reply, now you have their email address.

Many users are probably at that point vulnerable to simple password-guessing attacks. (First name, etc.) If you don't use strong passwords, a hacker now has half of what he needs to hijack your account. In many cases, the other half is easy. User IDs need to be nearly as private as passwords. User IDs, ideally, should be known only to the user and to admins or others with a need to know, associated with whomever issued the user ID. User IDs also shouldn't be used as default screen names - at least Google has avoided this trap.

In any case, they are now vulnerable to phishing attacks by sending email claiming to be from Google.

eBay discontinued the use of email addresses as user IDs several years ago, due to phishing attacks. They required all of their users who were using email addresses as user IDs to change their user IDs.

Fast forward several years, and now Google is using email addresses as user IDs. Not just PERMITTING them or ENCOURAGING them (as eBay once did) but REQUIRING them.

I am just astounded by the stream of poor design decisions coming out of Google.

(An aside - here's some fallout from the decision to require Google IDs to be used for Adwords and MCC accounts. If you manage accounts, including your own, you have AT LEAST two Google IDs. When you use Google groups, at a time when you happen to be logged-in to one or the other (or more) of your accounts, you are going to be posting as different users. I have two nicknames on Google Groups. And two sets of "read" pointers, etc. Fortunately, I read new messages using RSS, so I don't have to depend on the pointers.)