Facebook hacker beat my 2FA, bricked my Oculus, and hit the company credit card

Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by drivebycomment on Friday August 20, 2021 @09:02PM (#28253122)

Advanced Protection does have the account recovery. https://landing.google.com/advancedprotection/faq/ It is just very slow as it's a human process. There's very little reason you shouldn't use Advanced Protection, if your account is important enough.

[ Parent | on HN ]

Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by sascha_sl on Saturday August 21, 2021 @02:54AM (#28254855)

Big caveat being you can no longer use the account to develop things with the Google API or use some third party clients (e.g. rclone).

[ Parent | on HN ]

Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by jhugo on Saturday August 21, 2021 @04:05AM (#28255143)

Which Google API do you mean? I use advanced protection and have developed various things with various Google APIs, I just use a service account with minimal privileges for each thing I'm developing, which is probably best practice anyway. Not sure about rclone but probably it would work fine with a service account too?

[ Parent | on HN ]

Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by sascha_sl on Saturday August 21, 2021 @04:07AM (#28255149)

It blocks any unverified OAuth app, including the ones you create yourself.

[ Parent | on HN ]

Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by jhugo on Saturday August 21, 2021 @09:39AM (#28256932)

It sounds like you're trying to use APIs with your personal account rather than using a service account though? Again, I use Advanced Protection and I've never encountered the problem you're describing.

[ Parent | on HN ]

Re:Facebook hacker beat my 2FA, bricked my Oculus, and hit t... by staticassertion on Saturday August 21, 2021 @05:16AM (#28255463)

I'd just use a dummy account for developing.

[ Parent | on HN ]