Aw damnit. I forgot to bring a temporary code with me to work, now I can't log in to my Gmail -- stopped bring my cell phone everyday a while back because it's bulky.
No they didn't...at least not through Apple or Google servers/services. They phished, engineered users, infected user systems, cracked other weaker sites or whatever else, but neither Apple nor Google servers or services were breached.
You don't gain access to thousands of accounts in a single instant through phishing. There's more to it than these companies are willing to admit.
From what I've read, just like the fappening, it likely wasn't a single instance collection. Instead it's a collection from other compromised websites where people used the same login credentials.
Aw damnit. I forgot to bring a temporary code with me to work, now I can't log in to my Gmail -- stopped bring my cell phone everyday a while back because it's bulky.
I also don't use 2-step verification, and don't plan to. Maybe if I get bitten I'll start. It's a tradeoff for me - phone number is a personal information that I'm unwilling to provide to 3rd parties like Google, Facebook, Microsoft etc. who seem to be in business of collecting such info. And the gain is some extra security, and not that much since by far the biggest threat to me is someone getting hold of my phone.
From what I've read, just like the fappening, it likely wasn't a single instance collection. Instead it's a collection from other compromised websites where people used the same login credentials.
grep -i [username] google_5000000.txt | tr -d "."one of my emails came back as a positive (leaked) result, but the partial password it gave was not correct.
i wonder if the list is outdated
When I go to Google Authenticator web site, the first step is:Using an authenticator app doesn't give anyone you phone number. But if you are using a smartphone, there are apps like Facebook (and others, including some potentially shady ones) which can see your phone number and contacts unless you specifically block access using root privacy controls like XPrivacy or App Ops on Android.
Hmmm did not realize that's what it was, the news is very missleading then as they seem to say it's google that got hacked. I think it's more important to know which site got hacked and the blame should be on them, not Google. The news makes it sound like it's gmail that got hacked.
there's absolutely no reason not to use google two factor authentication with your gmail in my opinion.