5 ms·

This is super easy to do accidentally if you log into Google while simulating a mobile device in Chrome devtools, because your user agent string tells Google wh

This is super easy to do accidentally if you log into Google while simulating a mobile device in Chrome devtools, because your user agent string tells Google what device you are using. First verify you don't have an iPhone (or whatever) in your recently used devices: https://security.google.com/settings/security/activity https://security.google.com/settings/security/activity 1. Open Chrome incognito window 2. Open devtools 3. Toggle device mode to iPhone (or whatever) 4. http://google.com 5. Log in Now go back to recently used devices and you should see the new device. Occam's razor implies PEBKAC.

ikeboy 11y ago
But it should still have sent an email.
- dantiberian 11y ago
  Does it always send an email, or just when the connection is coming from an unexpected place? e.g. new IP address, unusual time, different cookies, e.t.c. A changed user agent on a browser is pretty small, it wouldn't surprise me if Google didn't email for things like that.
  - muddi900 11y ago
    Every time a new device or browser logs in I get an email
    - jdavis703 11y ago
      Right, but the UA also includes the browser's version in it. If you change from Chrome to Safari you're indeed using a different browser. If Chrome's UA gets updated from say "Chrome 45.1.1.1.1 WebKit" to "Chrome 45.1.1.2.0 WebKit" it shouldn't really care. To be more clear in the case of changing browsers it detects this chnage via cookies, not by UA string.
- jethro_tell 11y ago
  Sure, if it was me logging into someone else's account (and there had to be some conscious effort based on his random password), I'd log in and delete the email immediately. Delete from inbox, delete from trash, refresh.it seems like you would notice that but no one spends 24 hours a day looking at their email. It probably wouldn't be that hard to slip by the best of us. That's what two factor authentication is for. And not emailing the same account for login notifications. I just don't find this to hard to believe.
  - djrogers 11y ago
    >Sure, if it was me logging into someone else's account (and there had to be some conscious effort based on his random In the article he states he uses his own email server, not gmail, so logging in to his google account wouldn't allow this.
  - nucleardog 11y ago
    If you have a recovery email setup it will also receive that notification.
FreeFull 11y ago
That doesn't explain the string of youtube videos though. And I think the email would have been sent in that case.

ikeboy 11y ago

But it should still have sent an email.

dantiberian 11y ago
Does it always send an email, or just when the connection is coming from an unexpected place? e.g. new IP address, unusual time, different cookies, e.t.c. A changed user agent on a browser is pretty small, it wouldn't surprise me if Google didn't email for things like that.
- muddi900 11y ago
  Every time a new device or browser logs in I get an email
  - jdavis703 11y ago
    Right, but the UA also includes the browser's version in it. If you change from Chrome to Safari you're indeed using a different browser. If Chrome's UA gets updated from say "Chrome 45.1.1.1.1 WebKit" to "Chrome 45.1.1.2.0 WebKit" it shouldn't really care. To be more clear in the case of changing browsers it detects this chnage via cookies, not by UA string.
jethro_tell 11y ago
Sure, if it was me logging into someone else's account (and there had to be some conscious effort based on his random password), I'd log in and delete the email immediately. Delete from inbox, delete from trash, refresh.it seems like you would notice that but no one spends 24 hours a day looking at their email. It probably wouldn't be that hard to slip by the best of us. That's what two factor authentication is for. And not emailing the same account for login notifications. I just don't find this to hard to believe.
- djrogers 11y ago
  >Sure, if it was me logging into someone else's account (and there had to be some conscious effort based on his random In the article he states he uses his own email server, not gmail, so logging in to his google account wouldn't allow this.
- nucleardog 11y ago
  If you have a recovery email setup it will also receive that notification.

FreeFull 11y ago

That doesn't explain the string of youtube videos though. And I think the email would have been sent in that case.