Hacker News new | past | comments | ask | show | jobs | submit login

I doubt their poor compliance to standards is done maliciously. I'm guessing it's more about needing some service, finding an open standard or code that does what they need, making changes that are convenient for them, then moving on to the next project.



If not malice then willful harm through inaction. The service should be shut down or fixed.

From the Article:

> "Google’s CardDAV server silently wipes out all kinds of data it doesn’t care about."

How is this "bad" functionality treated differently than issues found and publicized after a 90-day-count-down in the security disclosure universe?

They likely have known about their noncompliance, and they must know the impact; they are a technically savvy group. Plus I presume they have the financial resources to fix this with a year-to-year rising stock price currently at 1,095.50 USD.

"... moving on to the next project" is irresponsible after unleashing a service which when used correctly WILL corrupt users' data.


> How is this "bad" functionality treated differently than issues found and publicized after a 90-day-count-down in the security disclosure universe?

For one, these aren't security issues.

Also, they do document the parts of the standards that they don't support or adhere to:

https://developers.google.com/google-apps/carddav/

Their documentation could probably be more complete, but it does say, for example, that they don't support user defined fields on WebDAV requests.

I suppose they could have opted to not mention CardDAV or the other standards and just published an API called GCard or something like that.

They do mention that interoperating with Apple's operating systems is working, so that may be what determined the subset they care about.

> service which when used correctly WILL corrupt users' data

So that comes back to who gets to define what correct use is? If you follow the Google documentation and are losing data, then I agree with you. They should fix the problem or update the documentation.


Aaaaaah they are in the clear then - I am alarmist and retract my assertion:

> "We have not implemented the full specification, however many clients such as Apple iOS™ Contacts and Apple Mac™ OS should interoperate correctly."

They've explained they're non-conformant so all is well IMO.

Thanks for the corrections and critique criddell.


Ah just like when I worked in x.400 Sprint was notorious for just ignoring stuff in the standard.

Also Goole doesn't even parse the date time in xml sitemaps 100% correctly and that's only a 4 page RFC!


We need to change the culture of software development such that this behaviour is considered unprofessional. Perhaps a professional software engineering association might help?


How is that kind of carelessness not a form of malice?


You think on some PowerPoint a manager had the bullet:

* break compatibility with Outlook


No, but I think a huge company saying, “Oh who gives a tupenny fuck about compatibility” is sort of malicious.


I don't think they have a "compatibility" slide anywhere at all at Google.




Consider applying for YC's Spring batch! Applications are open till Feb 11.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: