Hacker News Reader

What is actually shocking is that these data are made so easily accessible when you are logged into Google anywhere. There should be additional hurdles to view the entirety of a person's history with Google beyond merely being logged in. The potential for very easy and all-encompassing snooping (e.g. from friends and colleagues) is staggering!

View on HN

I actually find Google to be quite good here - if it detects something suspicious, such as login from a different browser or location, it will prompt you for another authentication factor, such as an SMS one-time code, or 2FA if you have it enabled.

I would add that if you haven't already enabled 2FA, you should.

If someone has access to this page (for your account), they have access to your Gmail, and likely have the ability to reset passwords and log in to any website you signed up for with that email address.

The solution, as always, is to secure your account.

Reply on news.ycombinator.com