News for hackers. Stuff that matters.
Re:Ask HN: My Google account was hacked, Google says they ca... by seaman1921 on Monday March 14, 2022 @04:36PM (#30677910)
> Google says they can't do anything to help me! They can't kick him off or disable my account, I just have to be harassed and blackmailed, and goodness knows what else.

Not kidding - How do we know you are not the hacker ?

In future please use 2F authentication otherwise there is really no way for anyone to tell who is the right owner.

Re:Ask HN: My Google account was hacked, Google says they ca... by grog454 on Monday March 14, 2022 @05:16PM (#30678451)
> Not kidding - How do we know you are not the hacker ?

We don't. But we can assume that they aren't for the purpose of discussion. It seems more likely that a victim would post the OP's post than a perpetrator.

Google also doesn't, but they can say with increased confidence what the probability of the OP being a victim is.

But there's an even hard problem: say person A sells their Google account to person B, and does this with completely offline communications (offline wrt Google). To Google, this situation may look no different than a stolen account, at least for some period of time. But person A is a scammer, claims their account was stolen, and attempts to initiate a recovery process with Google.

This situation is the reason I virtually never perform account recoveries for players of my games. I also require users to use a third party login (like Google or Facebook) for their account, because I want as little to do with account management as possible.

Re:Ask HN: My Google account was hacked, Google says they ca... by justin_oaks on Monday March 14, 2022 @07:15PM (#30679794)
The extreme sob story makes me suspicious too. It seems that every detail submitted by this person is designed to maximize sympathy.
Re:Ask HN: My Google account was hacked, Google says they ca... by pphysch on Monday March 14, 2022 @07:25PM (#30679872)
Yes indeed, what a bizarre post to get so many upvotes. I'd bet money that there is something shady going on here.
Re:Ask HN: My Google account was hacked, Google says they ca... by UncleMeat on Monday March 14, 2022 @08:03PM (#30680119)
Ill-conceived research paper attempt?
Re:Ask HN: My Google account was hacked, Google says they ca... by sizzle on Monday March 14, 2022 @09:25PM (#30680747)
I hope dang checks out the submission upvote analytics to see any red flags
Re:Ask HN: My Google account was hacked, Google says they ca... by lululouise on Wednesday March 16, 2022 @01:41AM (#30695699)
Unfortunately it's true, I'm sorry to make it sound like a sob story, Ive had the worst few days with this. I offered everything including my ID, banking, anything I could provide,to confirm it really is my account. Luckily I now have everything that's important.
Re:Ask HN: My Google account was hacked, Google says they ca... by willcipriano on Tuesday March 15, 2022 @03:05AM (#30682441)
My BS detector is at defcon 5. I'm betting this is a current or former boyfriend attempting to gain access to a account. Likely to do what has said to have happened.
Re:Ask HN: My Google account was hacked, Google says they ca... by lululouise on Wednesday March 16, 2022 @01:42AM (#30695708)
Please see my current replies. I don't think I have an ex boyfriend who would be capable of this, morally or intellectually, I tend to have a type thats generally sh*t with computers like me haha
Re:Ask HN: My Google account was hacked, Google says they ca... by klabb3 on Monday March 14, 2022 @04:44PM (#30678006)
> Not kidding - How do we know you are not the hacker ?

I think usually it's obvious for someone who can see the account's recent activity. You can also design challenge-response type questions for the person claiming the account, that only they could know, within some reasonable confidence interval.

Re:Ask HN: My Google account was hacked, Google says they ca... by omoikane on Monday March 14, 2022 @04:46PM (#30678037)
I think they meant "how does a random reader on an internet forum confirm that the OP is who they claim they are"?
Re:Ask HN: My Google account was hacked, Google says they ca... by tluyben2 on Monday March 14, 2022 @04:47PM (#30678052)
And most people can tell what to search for find specific emails; if that doesn’t prove it….
Re:Ask HN: My Google account was hacked, Google says they ca... by faeriechangling on Monday March 14, 2022 @08:11PM (#30680184)
If he had any purchase history, address, real name (combined with govt ID), or phone number in their account history perhaps those would be means of authentication? Authenticating the true owner of a hijacked account is hardly impossible or even very hard. Google knows who people are without them even having to log into an account from their relentless hoovering of data.
Re:Ask HN: My Google account was hacked, Google says they ca... by ohashi on Monday March 14, 2022 @04:58PM (#30678223)
We've been going through facebook recovery, it requires pictures of ID. Same way you do any KYC. They still have access to the phone that was connected originally as well but the attacker put in a swedish or belgium number (it says 046 but google shows belgium flag).
Re:Ask HN: My Google account was hacked, Google says they ca... by cinntaile on Monday March 14, 2022 @05:12PM (#30678403)
+46 is Sweden and +32 is Belgium, 046 is neither though?
Re:Ask HN: My Google account was hacked, Google says they ca... by ohashi on Monday March 14, 2022 @05:39PM (#30678729)
Yeah I am not sure, I assumed leading zero didn't matter. It had flag of belgium on google's screen but started with 046 which as you said, Sweden is +46. Maybe it's a Belgium number and starts with 046 and it hides country code.
Re:Ask HN: My Google account was hacked, Google says they ca... by laurensr on Monday March 14, 2022 @06:59PM (#30679635)
04[5-9][0-9](+6 digits) are Belgian mobile numbers in national notation. In international notation the leading 0 is ommitted and +32 put in front.
Re:Ask HN: My Google account was hacked, Google says they ca... by ohashi on Monday March 14, 2022 @09:43PM (#30680848)
Got it, so country code is hidden.

0460 [## ## ##] and had Belgian flag so that must be Google saving country code that way.

Re:Ask HN: My Google account was hacked, Google says they ca... by tinus_hn on Monday March 14, 2022 @06:23PM (#30679250)
They could just verify he knows the old password and controls the old phone number, and probably also has devices logged into or connected to the account.