
On Mon, 18 Apr 2016 09:02:59 PM Mark Trickett via luv-talk wrote:
It was my account, I had a very ambiguous email from my brother. I am
As Mark has decided to go public I'm writing a summary of some of the suggestions I made in private mail. I've redirected it to luv-main because securing Linux devices is a suitable topic for that list. It's certain that your password, system, or both are compromised, but given that you are using Debian it's most likely that just the password is compromised. The first thing to do is to change your Gmail password while using a device that you believe to be secure (IE something other than your current PC). Then enable 2 factor authentication and print out the QR code for the 2 factor authentication so you don't lose it. Make sure that you are using the latest version of your web browser. If you use Chromium be aware that you have to use Jessie or Testing/Unstable to have a fully supported version. Once you have 2 factor enabled you aren't at much risk of losing your account entirely. Then you can setup device specific passwords for phones etc. You want to do this as a priority as currently it might be possible for hostile parties to wipe any Android devices you may own and do other unpleasant things to you. I don't know if there is a 2factor app for Desktop Linux that does the same thing as the Android app. There probably is as the source has been released under a free license (it's in the f-droid repository). Also I recommended printing the QR code for the 2factor app to use, if you don't have an Android device this won't be useful. But I think you can get a number from the Google web site to use instead of the QR code (the code is just a way of reliably sending a big number). -- My Main Blog http://etbe.coker.com.au/ My Documents Blog http://doc.coker.com.au/