3 ms·
> The most likely scenario is that my email password was compromised and there’s a backdoor to disable 2FA after doing a password reset request which is a huge
by Thaxll 4y ago
> The most likely scenario is that my email password was compromised and there’s a backdoor to disable 2FA after doing a password reset request which is a huge security flaw that shouldn’t exist.
So you don't know if your gmail account was hacked or accessed? I would be worry about that.
- jcforbes 4y agoNot gmail, I run my emails through a personal server. I can't find any evidence that it was compromised and I, stupidly, didn't check access logs before they cycled out. I just can't think of any other way that they were able to do the password reset without access to my email. Obviously I immediately changed my password.