5 million ‘compromised’ Google accounts leaked

Status
Not open for further replies.
My id is not on the list. Nor are my other ids. One of my office collegues id is on the list. However, the password is again an older password.

As for the unique login for Google services, my password has always been unique and changes once a year. However, there are chances your computer may have a trojan/key logger, in which case this is defeated.

As for the chap who made the Sunny leone happy b'day thread, there is a very strong possibility that you could have a keygen on your own PC.
 
  • Like
Reactions: booo
vivek.krishnan said:
Many companies do the same, without using better tools such as proxies.
Click to expand...
first I tried to open the last pass site and got the invalid cert error. but when I persistently tried for few other links, found out that my site completely blocks it. for distributing malicious software... guess our security team dont want employees to use last pass. :blackeye:
so they are simply replacing the cert lol...
 
booo said:
first I tried to open the last pass site and got the invalid cert error. but when I persistently tried for few other links, found out that my site completely blocks it. for distributing malicious software... guess our security team dont want employees to use last pass. :blackeye:
Click to expand...

I use Chrome Sync myself and dont prefer to use LastPass or some other software.

As for the security team - nothing can be done about that. Initially, my id too was blocked, now have given myself full access - even TE was blocked.

The main flaw in Chrome Password Sync is the Windows password. If that is cracked, then its game over. However, physical access to the device is needed.
 
vivek.krishnan said:
As for the security team - nothing can be done about that. Initially, my id too was blocked, now have given myself full access - even TE was blocked.
Click to expand...
the interesting thing they did was to replace the cert. now, the browser will nag and everyone thinks that last pass is a bad site. sneaky bastards. :D
 
vivek.krishnan said:
I use Chrome Sync myself and dont prefer to use LastPass or some other software.

As for the security team - nothing can be done about that. Initially, my id too was blocked, now have given myself full access - even TE was blocked.

The main flaw in Chrome Password Sync is the Windows password. If that is cracked, then its game over. However, physical access to the device is needed.
Click to expand...

Physical access is the number one factor in security. If someone has physical access to your device, the likelihood of a breach becomes much higher. They don't need to guess your password, they can simply take the entire harddrive.
 
booo said:
the interesting thing they did was to replace the cert. now, the browser will nag and everyone thinks that last pass is a bad site. sneaky bastards. :D
Click to expand...

Not really. Its a HTTPS MITM to see what site you are browsing. Done by the firewall.[DOUBLEPOST=1410427887][/DOUBLEPOST]
Blackend said:
Physical access is the number one factor in security. If someone has physical access to your device, the likelihood of a breach becomes much higher. They don't need to guess your password, they can simply take the entire harddrive.
Click to expand...

No. I dont agree with that completely. Each has its own factor. And we can secure it just as easily.
 
Last edited:
Status
Not open for further replies.
Top Bottom