FireCloud is listed as unverified

SkyWarrior

Google has just warned me about FireCloud being an unverified developer therefore incurs a security risk for my google account. I guess broad should straighten this up with google.

Sheila

@SkyWarrior
Hi,

I just moved your question to the FireCloud forum where Kate can help you.

-Sheila

KateN

Thank you for your report. Could you tell me a bit about what you are doing to get that screenshot you took?

Sheila

@SkyWarrior
Hi,

I just moved your question to the FireCloud forum where Kate can help you.

-Sheila

KateN

Thank you for your report. Could you tell me a bit about what you are doing to get that screenshot you took?

SkyWarrior

Hi

It was a google security email came from google itself.

And when I go to my account details to check the security issue

And when I click to get the details

So this looks like a google issue.

dbernick

Hi! I'm the security head for Firecloud.

So a few months ago, Google Auth decided that it wanted to tag any site that doesn't have an explicit privacy policy posted on their site as an "unverified developer". We thought we were grandfathered in because we've been using their tech for years (and because they told us), but apparently we're not.

Because apparently we ask for "advanced" scopes like control of your GCP Billing, they do some extra scrutiny.

We have been working with Broad legal on creating one and should have it up soon, making the warning go away.