This is why we have MFA.

hellnuh, that your own website you keep posting?

Are we sure someone just didn't ask Gemini for 48 million Gmail credentials and immediately get them?

I'm holding a grudge because I was arranging a Craiglist sale and when I sent the buyer my phone number to text my account was suddenly disabled for "unusual activity" signing me out of everything. I was able to re-enable it right away, but I'm pretty sure whatever AI-trash system is in place to monitor accounts did it.

Brought to you by proton

That ai banner does not inspire trust at all :( The actual content reads well & they link other articles though. Weird.

I got almost that many Gmail addresses from trying to game Reddit's permabans. They really got it in for me over there, just because I took their commitment to free speech seriously. Turns out they were just kidding.

google stores passwords unhashed ???

Start setting up passkeys where available, that is the safest and easiest way, I store mine on my selfhosted vaultwarden but you could use other ways. As long as the devices you use are secure, no passwd leaks, spoofing attempts or phishing can threaten you.

AI slop

If you have a hardware security passkey like Yubikey as the only way to access the account and NO recovery phone or email, ONLY just backup codes secured locally, I feel like this wouldn’t be an issue anyways. I recently had someone try to use my old but still lightly active gmail to order Chipotle. I knew they couldn’t have access to my email though because only I have the Yubikey passkeys to get in.

All the bullshit they do to get our personal information for commercial reasons under the pretext of keeping our accounts safe, and they let this stuff get stolen left and right.

Most places in the country they don't have to tell you if your information was stolen either. Only california last I checked, so they usually tell everyone if they have to tell californians or else they would look worse. But without that law they wouldn't tell us if they thought we wouldn't find out.

I got a new email that doesn't force me to link phone or other email and verify now. Fuck google, fuck aol, yahoo, and the rest. Big tech is past the growth phase and into maximizing revenue, only the growth companies treat you well, find one of them.