11–17 of 17 posts
Isn't this huge from Google's security perspective? I don't recall any previous successful attack on its core infrastructure. A quick search/prompt shows: - Operation Aurora: https://en.wikipedia.org/wiki/Operation_Aurora > - 2010s global surveillance disclosures: https://en.wikipedia.org/wiki/2010s_global_surveillance_disc... >
Duplicate of event from August 5 ("one of Google’s corporate Salesforce instances was impacted"): https://news.ycombinator.com/item?id=44812343 https://cloud.google.com/blog/topics/threat-intelligence/voi...
This PCWorld article seems to be taking that to mean that every single gmail account (2.5B) is at risk with nothing to support that claim.
Isn't this huge from Google's security perspective? I don't recall any previous successful attack on its core infrastructure. A quick search/prompt shows: - Operation Aurora: https://en.wikipedia.org/wiki/Operation_Aurora > - 2010s global surveillance disclosures: https://en.wikipedia.org/wiki/2010s_global_surveillance_disc... >
> Activate Google’s Advanced Protection Program I'm dubious. This requires you give google a phone number. Almost universally if you give a company a phone number there is eventually an avenue for an attacker to convince the company to give them control of the account by demonstrating control of the number (which they've sim swapped or otherwise hijacked). Even if at the moment there is no avenue to exploit google th…
A phone number is optional if you give a recovery email. Create an iCloud account you don't use for any other reason and don't share it with anyone.