9 ms·

Can confirm this happened to me this afternoon on my android. Went into a full panic mode. I refused to type passwords since I was worried it might have been an

Can confirm this happened to me this afternoon on my android. Went into a full panic mode. I refused to type passwords since I was worried it might have been another app imitating Google and I had no recollection of any action that would have required me to sign in again. I made sure that my password was correct on my laptop browser to ensure that I was not fallen for a account compromise. Eventually restarted the phone, ran lookout security app and then typed it on smartphone.

thecatspaw 10y ago
shit, you just opened my eyes a bit. I woke up, saw 2 notifications about logging in again (got 2 accounts registered on my phone), and just typed the passwords in without second thought. Never occured to me that it could be a fishing attempt
- mkingston 10y ago
  Happened to me an hour or so ago. Notification on phone suggesting I log in again. I ignored it like I ignore everything that doesn't seem pressing. Then hangouts refused to send a message, which made me think the login suggestion was legitimate. Must say, like you, I probably ought to have scrutinised it a bit more..
- deleted 10y ago
  [deleted]
aargh_aargh 10y ago
Same with me.
JorgeGT 10y ago
> I refused to type passwords since I was worried it might have been another app imitating Google and I had no recollection of any action that would have required me to sign in again Same for me! So follow-up question, how do we know if an android app is the real deal? I opened the app switcher and it certainly said "Google Play Services" on top of the window asking for my password, and had the correct logo, but could other app present itself in the same way?
- recentdarkness 10y ago
  Guess what happened to me on my iPhone today in the morning when I put it out of the airplane mode. Same thing I didn't enter my password for the above mentioned reasons
- aub3bhat 10y ago
  I had the same issue. First I wanted to check whether the password I was using was still valid. So I verified/signed-in on another machine in an incognito mode. Once I had verified that the password was correct and still working. I then restarted android. After scanning using Lookout (honestly not really sure how good they are.). Rather than going through the "Google Play Services" notifications, I opened GMail app and checked if the past emails could be opened, after confirming that it was a legitimate app. I intentionally entered a completely incorrect password twice assuming that if it went away it was a really well crafted phishing attempt. Eventually I entered the password.
  - tripzilch 10y ago
    > I intentionally entered a completely incorrect password twice assuming that if it went away it was a really well crafted phishing attempt. That's a clever trick, I'll remember it for next time something similar happens. I had the same paranoia as several other people in this thread (don't enter password if you're prompted unexpected or without clear reason). I had the fortune only a "trash" gmail account got locked out, not my main one. So I verified on another machine, password was unchanged, checked if I really hadn't registered any other important accounts with that email, and just gave in after an hour or so, to make the notification go away.
- Aaargh20318 10y ago
  > how do we know if an android app is the real deal? You don't. Not that it really matters, if you care about security you shouldn't be using Android in the first place.
  - JorgeGT 10y ago
    Don't let the perfect be the enemy of good. Or in other words, I try to adjust my opsec/persec to a realistic threat model, not to my worst dystopian nightmares.
flexie 10y ago
I was signed out several times today. And I couldn't attach pdf-files bigger than 200Kb from Chrome. Then I logged in on Firefox and it worked again.
alicorn 10y ago
Same, got notification about both my Google accounts and was terrified it was some new phishing trick. Reading about Cloudbleed did not help matters either. At least I got extra motivated to secure up all my accounts, so there is that.
accountface 10y ago
Turn on 2-stage authentication and use Last Pass or a similar password manager. I can't really fathom how someone would have gained access to my account with those steps in place (and honestly if they did, I wouldn't even be mad because it's so impressive)... so I immediately assumed that Google was having a log-in problem.
msimpson 10y ago
If you fear phishing, type the wrong password and see if it takes it. If yes, it's obviously a phisher app/site/whatever.
- thanksgiving 10y ago
  I've noticed that Facebook sometimes refuses to let me in the first time even though the password is correct. I try the same password again and viola!
  - grzm 10y ago
    Interesting. Are you using a password manager? How are you confirming that you've entered the password correctly the first time?

thecatspaw 10y ago

shit, you just opened my eyes a bit. I woke up, saw 2 notifications about logging in again (got 2 accounts registered on my phone), and just typed the passwords in without second thought. Never occured to me that it could be a fishing attempt

mkingston 10y ago
Happened to me an hour or so ago. Notification on phone suggesting I log in again. I ignored it like I ignore everything that doesn't seem pressing. Then hangouts refused to send a message, which made me think the login suggestion was legitimate. Must say, like you, I probably ought to have scrutinised it a bit more..
deleted 10y ago
[deleted]

aargh_aargh 10y ago

Same with me.

JorgeGT 10y ago

> I refused to type passwords since I was worried it might have been another app imitating Google and I had no recollection of any action that would have required me to sign in again Same for me! So follow-up question, how do we know if an android app is the real deal? I opened the app switcher and it certainly said "Google Play Services" on top of the window asking for my password, and had the correct logo, but could other app present itself in the same way?

recentdarkness 10y ago
Guess what happened to me on my iPhone today in the morning when I put it out of the airplane mode. Same thing I didn't enter my password for the above mentioned reasons
aub3bhat 10y ago
I had the same issue. First I wanted to check whether the password I was using was still valid. So I verified/signed-in on another machine in an incognito mode. Once I had verified that the password was correct and still working. I then restarted android. After scanning using Lookout (honestly not really sure how good they are.). Rather than going through the "Google Play Services" notifications, I opened GMail app and checked if the past emails could be opened, after confirming that it was a legitimate app. I intentionally entered a completely incorrect password twice assuming that if it went away it was a really well crafted phishing attempt. Eventually I entered the password.
- tripzilch 10y ago
  > I intentionally entered a completely incorrect password twice assuming that if it went away it was a really well crafted phishing attempt. That's a clever trick, I'll remember it for next time something similar happens. I had the same paranoia as several other people in this thread (don't enter password if you're prompted unexpected or without clear reason). I had the fortune only a "trash" gmail account got locked out, not my main one. So I verified on another machine, password was unchanged, checked if I really hadn't registered any other important accounts with that email, and just gave in after an hour or so, to make the notification go away.
Aaargh20318 10y ago
> how do we know if an android app is the real deal? You don't. Not that it really matters, if you care about security you shouldn't be using Android in the first place.
- JorgeGT 10y ago
  Don't let the perfect be the enemy of good. Or in other words, I try to adjust my opsec/persec to a realistic threat model, not to my worst dystopian nightmares.

flexie 10y ago

I was signed out several times today. And I couldn't attach pdf-files bigger than 200Kb from Chrome. Then I logged in on Firefox and it worked again.

alicorn 10y ago

Same, got notification about both my Google accounts and was terrified it was some new phishing trick. Reading about Cloudbleed did not help matters either. At least I got extra motivated to secure up all my accounts, so there is that.

accountface 10y ago

Turn on 2-stage authentication and use Last Pass or a similar password manager. I can't really fathom how someone would have gained access to my account with those steps in place (and honestly if they did, I wouldn't even be mad because it's so impressive)... so I immediately assumed that Google was having a log-in problem.

msimpson 10y ago

If you fear phishing, type the wrong password and see if it takes it. If yes, it's obviously a phisher app/site/whatever.

thanksgiving 10y ago
I've noticed that Facebook sometimes refuses to let me in the first time even though the password is correct. I try the same password again and viola!
- grzm 10y ago
  Interesting. Are you using a password manager? How are you confirming that you've entered the password correctly the first time?