Live data from Hacker News

Ask HN: Google warned me that a state organized hacking group targeted me

news.ycombinator.com

1–10 of 43 posts

Ask HN: Google warned me that a state organized hacking group targeted me

#1
Has anyone of you guys gotten that message?

I'm still not sure why they targeted me nor how? I'm neither famous nor a journalist or blogger or scientist or something like that.

Nonetheless,what can I do to find out how they tried it? Or if they broke in or if my network is comprised?

And what can I do to prevent in future? Beside 2fa.

Re: Ask HN: Google warned me that a state organized hacking group targeted me

#3

This in itself sounds like a phishing attack. Is the mail authentic?

Not a mail.you get that message when logging in to Google.

I first thought that too.and tried another browser ( got that message in Vivaldi first,than tried IE) Same result.

Here are some old articles about that:

https://www.recode.net/2017/3/24/15054954/google-reassures-u...

http://www.zdnet.com/article/google-heres-why-you-shouldnt-f...

Re: Ask HN: Google warned me that a state organized hacking group targeted me

#4

This in itself sounds like a phishing attack. Is the mail authentic?

Not a mail.you get that message when logging in to Google. I first thought that too.and tried another browser ( got that message in Vivaldi first,than tried IE) Same result. Here are some old articles about that: https://www.recode.net/2017/3/24/15054954/google-reassures-u... http://www.zdnet.com/article/google-heres-why-you-shouldnt-f...

Yea, it does look legit after reading the articles you posted. I am not a hacker per se, but I guess uncovering what a gov hacker did in your account is highly difficult. In terms of safety, use a password manager that creates and stores hard-to-crack passwords for you. I am pretty happy with Dashlane, 1password has a good reputation, too.

Re: Ask HN: Google warned me that a state organized hacking group targeted me

#5

Earlier quoted context omitted.

Not a mail.you get that message when logging in to Google. I first thought that too.and tried another browser ( got that message in Vivaldi first,than tried IE) Same result. Here are some old articles about that: https://www.recode.net/2017/3/24/15054954/google-reassures-u... http://www.zdnet.com/article/google-heres-why-you-shouldnt-f...

Yea, it does look legit after reading the articles you posted. I am not a hacker per se, but I guess uncovering what a gov hacker did in your account is highly difficult. In terms of safety, use a password manager that creates and stores hard-to-crack passwords for you. I am pretty happy with Dashlane, 1password has a good reputation, too.

What ! Don’t use a password manager and turn on 2 factor Authentication

Re: Ask HN: Google warned me that a state organized hacking group targeted me

#6
This is when you know you've "made it", when state intel is trying to get to you :-)

Seriously now, even though you're not famous or a jounalist you might have some type of valuable access in your life? Or maybe it's just a false positive from google. Or maybe you weren't being especially targetted, and instead your e-mail ended up in some list of valuable e-mails (rightly or wrongly).

Re: Ask HN: Google warned me that a state organized hacking group targeted me

#7

Earlier quoted context omitted.

Yea, it does look legit after reading the articles you posted. I am not a hacker per se, but I guess uncovering what a gov hacker did in your account is highly difficult. In terms of safety, use a password manager that creates and stores hard-to-crack passwords for you. I am pretty happy with Dashlane, 1password has a good reputation, too.

What ! Don’t use a password manager and turn on 2 factor Authentication

Absolutely use a password manager, and a strong passphrase for the master password [1]

Why would you say not?

I'm not trying to be rude or anything. Let's have a discussion, and if I can convince you to do use one, I'd have made one more person safer.

[1] I made this for a dead simple way to make passphrases: https://amingilani.github.io/password-maker/

Re: Ask HN: Google warned me that a state organized hacking group targeted me

#9

Earlier quoted context omitted.

What ! Don’t use a password manager and turn on 2 factor Authentication

Absolutely use a password manager, and a strong passphrase for the master password [1] Why would you say not? I'm not trying to be rude or anything. Let's have a discussion, and if I can convince you to do use one, I'd have made one more person safer. [1] I made this for a dead simple way to make passphrases: https://amingilani.github.io/password-maker/

Not OP but open for a chance. Last time I checked the popular password managers saved the passwords in one way or another. Which personally simply sounds like a bad idea to begin with.

Even if in theorie they are safe. Even the slight chance that a single failure could lead to all my passwords getting in the wrong hands at once just is to scary.

Re: Ask HN: Google warned me that a state organized hacking group targeted me

#10
post #9

Earlier quoted context omitted.

Absolutely use a password manager, and a strong passphrase for the master password [1] Why would you say not? I'm not trying to be rude or anything. Let's have a discussion, and if I can convince you to do use one, I'd have made one more person safer. [1] I made this for a dead simple way to make passphrases: https://amingilani.github.io/password-maker/

Not OP but open for a chance. Last time I checked the popular password managers saved the passwords in one way or another. Which personally simply sounds like a bad idea to begin with. Even if in theorie they are safe. Even the slight chance that a single failure could lead to all my passwords getting in the wrong hands at once just is to scary.

I must admit, I use Apple’s Keychain, I wouldn’t trust a third party app.
Post reply on HN