Timeline for Spooky Suspicious Sign-In From My Town
Current License: CC BY-SA 4.0
6 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Dec 31, 2020 at 0:34 | comment | added | Polynomial | @JanetMcElroy I highly doubt it. Given that info, my guess would be that either someone in your town is messing with your account - maybe some local kid fancies themselves as a hacker and is just looking up local folks' email addresses in a password dump - or your device briefly accidentally connected to an open WiFi access point while you were out (or something like that) and the Windows NT part is a misidentification. | |
| Dec 31, 2020 at 0:31 | comment | added | Janet McElroy | I know this is getting to a serious tinfoil hat level, but could it be a local LEO? I don't know why they would be interested in me, but that's the only group I can think of that could plausibly obtain a password (perhaps from a cloud password keychain, I did have this password stored with google). But then again, would they ever even log in directly like that? I would have guessed they'd just subpoena or get a warrant for emails and bypass any login systems. Still scratching my head here… | |
| Dec 31, 2020 at 0:22 | comment | added | Janet McElroy | I managed to track down the IP, it was embedded in the page source of the google security event page (seems like the page requests this stuff but doesn't render it). The IP doesn't match the IP of another listed event just a few hours later, when I changed my password. So I don't think it came from my house. IP lookups say it is a comcast connection in a nearby part of town, so I don't think it's a mobile connection of any kind. I've changed my password and done the all the usual things to secure the account. But I am still mystified as to how this could happen and it freaks me out! | |
| Dec 30, 2020 at 22:18 | comment | added | Polynomial | SMS 2FA is pretty bad because of that issue, but no 2FA is still worse than SMS 2FA in my opinion. Ideally, though, use Google Authenticator or a similar app wherever possible. | |
| Dec 30, 2020 at 22:15 | comment | added | browsermator | good advice... but my buddy once was a victim of a sim-swap and said that using 2FA made things worse and advised against it. What's your opinion on that? Maybe use a phone# that's not your cell? (google voice or ???) | |
| Dec 30, 2020 at 22:13 | history | answered | Polynomial | CC BY-SA 4.0 |