Hacker News Reader

Comment by yokoprime | Hacker News Reader

Almost sounds like your email is compromised. Change password if you haven't done that in a while. You should also check the last account activity (gmail: https://support.google.com/mail/answer/45938?hl=en)

Make sure you are using MFA for any account which allows this. Don't re-use passwords, get a password manager like 1password or bit warden.

View on HN

I do use a password manager with a unique generated password for all my online accounts. I've checked my Gmail and Google account activity and everything looks ok. I do have Yubikey for Google MFA which I've been using for several years.

You dont have any forwarding rule or app token which is comprimised, right ?

You’ve got to think what could possibly link all of the accounts. E-mail, phone number, or name. That’s it. I suggest you change all three.

also: do you have any browser extensions installed? They can leak all sorts of info, including passwords.

I have uBlock, Facebook Container (from Mozilla), React devtools, Redux devtools.

uBlock origin right?

Try using a more common browser (Chrome, Edge, Safari) and see if that changes anything.

When you sign up for a service, access it from Google, not by typing the address directly.

I used the same as you do and would often get my accounts blocked. I suspect the absence of cookies offered by Firefox containers is suspect as well. Now I make sure to create accounts on these big platforms using a "normalized" setup and encounter far less issues.

- Many services do not like too much blocking. Like fb container.

- Look if you have some other location for sign-in. https://myaccount.google.com/permissions

- Likely some IoT or another device is making your house spammy.

How can he check his account activity if Google won't log him in?

Well, he's clearly signing up for new services (which all require email verification) so he has another email account.

Not sure how that helps with the original account, though.

Presumably OP user would be content with entering a future world where he is no longer banned on new accounts.

It just seems like a chicken and egg thing. How can you identify activity that led to account bans on a new account that hasn't been banned yet?

Make sure you don't have any unwanted forwarding rules or alternate security helpers.

Or maybe a Tor exit node running on his IP address?

Or a device in their lan is compromised.

This was my first instinctive reason to look for. If fraud is beeing reported across couple of services, something could be poisoning traffic comming out of the OP’s appartment, rendering his public IP ill.

Reply on news.ycombinator.com