Gmail safe? Brute Force sh*t...

[MC2015]

Hi,

I've heard a lot about Brute Force and hacked accounts. This app just tries millions of words to hack someone's account. But why doesn't google just stop this? Shouldn't they reg, that there is something wrong going on?

Thx MC

[skywalk]

These attacks are working on a stolen or otherwise obtained hashed password repository(locked SAM files on Windows).
Not through the "3 strikes and you're out" gui or web interface.
Once they find a password hit for a known username, then they can proceed to a normal login.

[IdeasVacuum]

Your data is not safe in Google's hands anyway, according to Google! http://news.cnet.com/8301-13505_3-9768298-16.html

[sec]

Your data is not safe in Google's hands anyway, according to Google! http://news.cnet.com/8301-13505_3-9768298-16.html

which safer?

Hi,

I've heard a lot about Brute Force and hacked accounts. This app just tries millions of words to hack someone's account. But why doesn't google just stop this? Shouldn't they reg, that there is something wrong going on?

Thx MC

You should enable 2-step verification http://www.google.com/landing/2step/

[MC2015]

Thx, so no one could check my account easily, except google and of course the nsa? That's good to know. I just was scared, because I read so many threads about hacked accounts....and they are always writing something about phishing and Brute Force.

[PB]

> why doesn't google just stop this?

They do. Turn on two-step verification, and your login is safe.
Nobody can log into my Google account because it sends a text
message to my phone with a verification code. So, good luck to
anyone trying to get in.

> http://news.cnet.com/8301-13505_3-9768298-16.html

That article is 8 years old, and it's been established that the
only reason that clause exists is so Google can push your data
to other devices that you own and such. It's not that they own
your data at all.

Here's Google's declaration from their site as of right now:

> Who owns the data that organizations put into Google Apps?
> To put it simply, Google does not own your data. We do not take a position
> on whether the data belongs to the institution signing up for Apps, or the
> individual user (that's between the two of you), but we know it doesn't
> belong to us!

Source: https://support.google.com/a/answer/60762

[MC2015]

Thanks!!

[IdeasVacuum]

I like a lot (if not most) of Googles' stuff, but they are a huge conglomerate now and have broken laws in Europe which they knew they shouldn't, but pleaded ignorance! Use their services? Sure. Trust them with your data? - at your peril.

[PB]

Depends what value you have on your data.

I use Gmail every day, but I'm only sending funny cat pictures
to my family and stuff. I'm not negotiating business deals with it.

I use Google Drive to back up my data to the cloud, but I stick
all the files in a strongly-encrypted RAR archive first, so there's
no risk of snooping Google engineers taking a peek at it (this has
actually happened in the past!).