Google Contacts API - 风险太大？
我正在考虑将 Google Contacts API 用于网络应用程序，但我担心用户可能会获得糟糕的体验，而这可能会归咎于我。
我打算以负责任的方式使用这些数据，否则我可能会因其他人滥用数据而受到指责。 还有其他人有过这个吗？ 你对此做了什么？
I'm considering using the Google Contacts API for a webapp, but I'm worried that a user might have a bad experience that could be blamed on me.
I intend to use the data in a responsible manner, I could get blamed for somebody else's misuse of it. Has anyone else had this? What did you do about it?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（3）
回答这个问题：你能保护你的网络应用程序免受所有黑客的攻击吗？ 你比外面的罪犯更聪明吗？
如果不是，那么数据将不安全。 犯罪分子会想出巧妙的方法从网络数据中勒索收入。 如果我必须申请新工作，我可以要求 StackOverflow 为我创建一份简历——他们拥有所有必要的数据，但那是因为我想要它。 所以这可能没问题。 但有些脑子有病的人可能会在我的帖子中发现一些模式，一些我从未想到过的东西——词频、帖子长度、答案的复杂性、发布时间——以扣除一些我不想要的进一步信息公开。
所以更好的问题是：收入（你想要获得的）值得冒这个风险吗？ 如果除了责备之外你没有从数据中得到任何东西，为什么还要收集它呢？
Answer this question: Can you secure your webapp against all crackers out there? Are you more clever than any criminal out there?
If not, then the data won't be safe. Criminals will come up with ingenious ways to extort a revenue from data on the web. If I should ever have to apply for a new job, I could ask StackOverflow to create a CV for me -- they have all the necessary data but that's because I want it. So this is probably OK. But some sick mind may find patterns in my posts, things which I'd never have thought of -- word frequencies, length of posts, complexity of the answer, time of posting -- to deduct some further info which I didn't want to disclose.
So the better question is: Is the revenue (which you want make) worth the risk? If you don't get anything for the data except blame, why collect it?
你可能对此无能为力，但我不担心。 在你提到的情况下，很明显问题出在哪里——人们不会在一周内注册那么多网站。 即使某个用户确实碰巧发生了这种情况，当他们搜索时，他们也不会找到您找到的所有垃圾邮件引用。
There's probably not much you can do about that, but I wouldn't worry. In the case you mention it was clear where the problem was - people don't sign up for that many sites in a single week. And even if it does happen coincidentally for one user, when they search they aren't going to find all the spam references you found.
我认为这个问题通常会让人们对第三方联系人应用程序感到害羞，因此您应该避免让您的应用程序依赖它。
读完您的故事后，我可以肯定地告诉您，现在我永远不会让任何第三方应用程序出于任何原因通过 API 访问我的联系人。
I think that this problem in general will make people shy to third-party Contacts apps, and for that reason you should avoid making your application depend on it.
Having read your story, I can tell you for sure that now I will never let any third party app access my Contacts via API for any reason.