Live data from Hacker News

Who is accessing your Gmail account?

antoniocangiano.com

41–50 of 52 posts

Re: Who is accessing your Gmail account?

#43
post #33

Earlier quoted context omitted.

Did you check your 'sent' folder, by any chance? If there are copies of the emails there, then most likely they simply accessed your account directly with your password - which is much more concerning (albeit easy to fix by changing all your passwords)

Whoa, thanks, I should thought of that! They sent one on the day of the access (10 June). There are 17 other potential ones, but I had moved them to my spam folder, so I can't tell where they came from originally. Looking closer, the first email in each chain seems to come from my account, but they are spread over several days, not just the day of the access. Unfortunately, they could have potentially accessed any ot…

No, it says "write subject here".

Re: Who is accessing your Gmail account?

#44

Earlier quoted context omitted.

My server is having problems.

Your problem is the page is being gzipped twice. (If you haven't already figured that out.)

Thanks. The pages were displaying correctly on my machine. However I think Super Cache compression was partially to blame.

Re: Who is accessing your Gmail account?

#47

Earlier quoted context omitted.

Not if you give your username and passwords to websites. I feel like you don't understand this distinction all up and down this thread... Also, man, what is the point of DBANing your install? Is software that is no longer accessible to the OS or likely even any consumer level hardware going to magically log your keystrokes, I mean make you give your usernames and passwords to websites and then be surprised that they…

>Not if you give your username and passwords to websites. I feel like you don't understand this distinction all up and down this thread... I've never given my username and password directly to websites, except for Etacts. For the other sites, I simply authorized them (through the Google interface) to access certain functionalities. Behind the scenes Google doesn't provide them with my password: https://www.google.com…

You're giving your password to someone else. You don't magically get some guarantee that they are safe, that they won't be stolen etc. Yes, I know that oAuth perms can be revoked, that is the entire point and that's why it's dumb to give a site your credentials when better alternatives exist.

"I've never given my username and password directly to websites, except for Etacts." This is all about Etacts right? How do you expect someone to be accessing your account? You gave them your user and password. The point is, you hand out your username and password, it just makes you look silly to suggest that your account is being compromised by covert wifi sniffers (you are using encryption right?), etc.

I still don't understand why you need to DBAN to do an OS reinstall unless you are just using the term DBAN loosely.

Re: Who is accessing your Gmail account?

#48
post #13

Earlier quoted context omitted.

I'm afraid this is common. We better find out what the heck is going on with that IP. I've enquired with Slicehost about it, and we'll see if they get back to us.

I have the SliceHost ip in the list of recent activity too. Let's find out.

It's confirmed, it was Etacts. I will post a follow-up as soon as I manage to make the site run smoothly.

Re: Who is accessing your Gmail account?

#49
This was Etacts. We responded to Antonio's support email this morning within a few minutes of its arrival to let him know the IP address in question belongs to us. We are talking about ways now to prevent this type of confusion from happening in the future.

Re: Who is accessing your Gmail account?

#50
post #19

Am I missing something here? From their website, it looks pretty clear that Etacts advertises checking your e-mail to remind you to keep in touch with people. Just like I wouldn't be surprised that Mint.com accesses my bank account online, this is hardly as outrageous as he makes it seem. Also, wiping your computer or using 1Password isn't going to stop you from giving your password to random web apps...

Its worth pointing out that Etacts no longer uses passwords, but uses Gmail's oAuth. I seem to remember that they were its firsts user, I think.
Post reply on HN