On Mon, 18 Apr 2016 09:02:59 PM Mark Trickett via luv-talk wrote:
It was my account, I had a very ambiguous email from
my brother. I am
As Mark has decided to go public I'm writing a summary of some of the
suggestions I made in private mail. I've redirected it to luv-main because
securing Linux devices is a suitable topic for that list.
It's certain that your password, system, or both are compromised, but given
that you are using Debian it's most likely that just the password is
compromised. The first thing to do is to change your Gmail password while
using a device that you believe to be secure (IE something other than your
current PC). Then enable 2 factor authentication and print out the QR code
for the 2 factor authentication so you don't lose it.
Make sure that you are using the latest version of your web browser. If you
use Chromium be aware that you have to use Jessie or Testing/Unstable to have
a fully supported version.
Once you have 2 factor enabled you aren't at much risk of losing your account
entirely. Then you can setup device specific passwords for phones etc. You
want to do this as a priority as currently it might be possible for hostile
parties to wipe any Android devices you may own and do other unpleasant things
to you.
I don't know if there is a 2factor app for Desktop Linux that does the same
thing as the Android app. There probably is as the source has been released
under a free license (it's in the f-droid repository).
Also I recommended printing the QR code for the 2factor app to use, if you
don't have an Android device this won't be useful. But I think you can get a
number from the Google web site to use instead of the QR code (the code is
just a way of reliably sending a big number).
--
My Main Blog
http://etbe.coker.com.au/
My Documents Blog
http://doc.coker.com.au/