Scammed out of $130K via fake Google call, spoofed Google email and auth sync

Re:Scammed out of $130K via fake Google call, spoofed Google... by traceroute66 on Tuesday September 16, 2025 @03:48PM (#45267052)

> Always use a third party like 1Password or similar.

Or even better, don't rely on a third-party hosted service.

I've been a Codebook[1] user since the old-days when they used to call it Strip.

They are old-school, local-system storage. With sync/backup done how you like it (all three encrypted before it leaves your computer):

    - Dropbox
    - Google Drive
    - Local folder (which you can then sync with using your own mechanism)
    - Recently (only this year) they introduced a totally optional hosted subscription cloud-sync option for those who want it

[1] https://www.zetetic.net/codebook/

[ Parent | on HN ]

Re:Scammed out of $130K via fake Google call, spoofed Google... by no_wizard on Tuesday September 16, 2025 @06:00PM (#45268746)

There’s something to be said for the setup and largely forget it nature of 1Password

There’s good reasons to use it over self managed solutions, just like there are other good reasons to use a self managed system like this.

Neither should be strictly dictated as better without first ascertaining what the user is looking for

[ Parent | on HN ]

Re:Scammed out of $130K via fake Google call, spoofed Google... by lokar on Tuesday September 16, 2025 @11:12PM (#45271185)

The backup of a TOTP is just the seed, right? Print it out and keep it with your other sensitive papers

[ Parent | on HN ]