Upvote Upvoted 23 Downvote Downvoted
1 2
i got hacked
posted in Off Topic
31
#31
-2 Frags +

haha yes!!

haha yes!!
32
#32
3 Frags +

Whenever I log in to my Gmail, I need to enter a code that it sends to my cell phone.

It's a pain in the dick to do, but if it helps prevent my email from getting hacked into, I'm on board.

(I realize two-factor authentication is not perfect, but hey it definitely helps.)

Whenever I log in to my Gmail, I need to enter a code that it sends to my cell phone.

It's a pain in the dick to do, but if it helps prevent my email from getting hacked into, I'm on board.

(I realize two-factor authentication is not perfect, but hey it definitely helps.)
33
#33
0 Frags +

I actually don't have a cellphone rofl. So that doesn't really work. It says that I can use it with a call but VOIP numbers don't work.

I actually don't have a cellphone rofl. So that doesn't really work. It says that I can use it with a call but VOIP numbers don't work.
34
#34
-1 Frags +
GetawhaleWhenever I log in to my Gmail, I need to enter a code that it sends to my cell phone.

It's a pain in the dick to do, but if it helps prevent my email from getting hacked into, I'm on board.

(I realize two-factor authentication is not perfect, but hey it definitely helps.)

my only fear with two-factor is that my google account is tied to my android phone, so i'm worried hacking my gmail = hacking my phone

[quote=Getawhale]Whenever I log in to my Gmail, I need to enter a code that it sends to my cell phone.

It's a pain in the dick to do, but if it helps prevent my email from getting hacked into, I'm on board.

(I realize two-factor authentication is not perfect, but hey it definitely helps.)[/quote]
my only fear with two-factor is that my google account is tied to my android phone, so i'm worried hacking my gmail = hacking my phone
35
#35
1 Frags +

I use Google Authenticator on my phone for Gmail authentication, and with Steam Guard sending emails to that account it basically means access to my phone is needed for Steam account access from a new device.

There are desktop application implementations that support Google Authenticator if you don't use a phone. See links:

https://github.com/cdmackie/winauth
http://superuser.com/questions/462478/is-there-a-google-authenticator-desktop-client

You are of course still vulnerable to keyloggers with a PC-only approach (though Authenticator generates time-based codes from a QR code scanned at setup, so it's probably still effective), and any kind of remote control would still leave you vulnerable if you are auto-logged-in on your usual device (which is the default for Steam Guard and Gmail), but it's at least an extra obstacle that could deter anyone simply mass-compromising accounts.

Make sure you're not reusing your email or Steam passwords anywhere else; login credentials can be logged by malicious websites, or stored in plaintext/reversible encrypted form and stolen from incompetent ones. Your email is usually the key to recovering any other accounts, so have separate, unique passwords for your email and for any financial services you use, and limit re-use to accounts that don't unlock other accounts or screw you over personally (though ideally, don't reuse at all).

I use Google Authenticator on my phone for Gmail authentication, and with Steam Guard sending emails to that account it basically means access to my phone is needed for Steam account access from a new device.

There are desktop application implementations that support Google Authenticator if you don't use a phone. See links:

https://github.com/cdmackie/winauth
http://superuser.com/questions/462478/is-there-a-google-authenticator-desktop-client

You are of course still vulnerable to keyloggers with a PC-only approach (though Authenticator generates time-based codes from a QR code scanned at setup, so it's probably still effective), and any kind of remote control would still leave you vulnerable if you are auto-logged-in on your usual device (which is the default for Steam Guard and Gmail), but it's at least an extra obstacle that could deter anyone simply mass-compromising accounts.

Make sure you're not reusing your email or Steam passwords anywhere else; login credentials can be logged by malicious websites, or stored in plaintext/reversible encrypted form and stolen from incompetent ones. Your email is usually the key to recovering any other accounts, so have separate, unique passwords for your email and for any financial services you use, and limit re-use to accounts that don't unlock other accounts or screw you over personally (though ideally, don't reuse at all).
36
#36
2 Frags +

Yeah, I have completely different passes for all my financial, educational, gaming, and communication sites. I'll also try out the authenticator.

Yeah, I have completely different passes for all my financial, educational, gaming, and communication sites. I'll also try out the[i][/i] authenticator.
37
#37
0 Frags +

Edit: wrong thread

Edit: wrong thread
1 2
Please sign in through STEAM to post a comment.