I got hacked, lost crypto and what it says about Apple’s security. Part 1

Re:I got hacked, lost crypto and what it says about Apple’s ... by kd913 on Sunday October 25, 2020 @05:23PM (#24890005)

I don't think there is anything wrong in particular with using Chrone's browser sync or password management system at all. That is so long as the linked account is secure.

The problem here is the weakest link which I imagine is the recovery email assigned to his google account (ie probably the Yahoo account). That was likely compromised because of the phone/SMS-based 2fa.

That is nothing to do with Google as users should be aware of the security of their recovery emails.

[ Parent | on HN ]

Re:I got hacked, lost crypto and what it says about Apple’s ... by ksaitor on Sunday October 25, 2020 @10:24PM (#24892287)

Yahoo account wasn't a recovery account for Gmail.

[ Parent | on HN ]

Re:I got hacked, lost crypto and what it says about Apple’s ... by kd913 on Monday October 26, 2020 @09:59AM (#24896214)

All I know is that it's pretty simple to secure your Google Account.

1) Use something like a Microsoft/Google as a recovery email. 2) Setup TOTP 2fa and monitor regularly account access. 3) Don't leak your password.

If a google account is hacked, it's almost certainly caused by some fault by the user.

[ Parent | on HN ]