[AusNOG] Google Recovery Contact

[Nick Stallman]

You can simply reject the recovery account change. The recovery address 
gets an email with details upon a change.
It would be kinda stupid having a recovery address if it could be 
thwarted so easily.

It does sound like Google provided plenty of useful tools both for 
preventing the hack, and to recover from the hack afterwards.
Those features were simply not used properly. It is security 101.

For a single regular account I wouldn't be holding by breath for help 
from Google.


On 31/10/16 15:02, Pete Mundy wrote:
>> On 31/10/2016, at 4:48 pm, Chad Kelly <chad at cpkws.com.au> wrote:
>>
>> On 10/31/2016 12:00 PM, ausnog-request at lists.ausnog.net wrote:
>>> Hi Guys,
>>>
>>> I have a client that has had their google account hacked and google support is doing nothing to help them get it back. This is the second time this has happened.
>>>
>>> We go through the password recovery process and get to the point where it asks for a recovery email address. The email address used has been closed and google wont allow it to be re-opened
>> Hi This stuff is security 101.
>>
>> Your client shouldn't be using another Google account as a recovery email for an already hacked Google account.
>>
>> The recovery account should be on a totally separate domain and a separate network  for rather obvious reasons.
>
> But would it have made any practical difference anyway? Wouldn't any hacker worth their salt just immediately change the recovery address upon gaining control of the primary account, thereby rendering any prior recovery address useless?
>
> Wouldn't the better way to mitigate this sort of thing have been to use 2FA?
>
> Pete Mundy
>
>
>
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog

-- 
Nick Stallman
Technical Director
Agentpoint Pty Ltd
The Real Estate Web Developers
Melbourne | Sydney | Miami
nick at agentpoint.com
www.agentpoint.com.au | www.zooproperty.com | www.ginga.com.au | 
www.business2.com.au

Business2.com.au is a real estate agent information website that helps 
you understand Portals, Technology and comes with FREE tools to help 
your Agency become an online success!