Re: Critical security alert (fwd)

[robert <http://dummy.us.eu.org/robert>]

I guess it was from Brazil.  Don't know how they got your email address
and password, possibly from a leak somewhere else where you had the same
password.

I just did a quick search.  It looks like you'd need to set up SMS as a
back-up 2FA before setting up an authenticator.  (I'm thinking we should
use KeePass, since that's the easiest.  But, once we have the secret key,
we can distribute the authentication ability any number of machines.)

 https://authy.com/guides/googleandgmail/

 > From: robert <http://dummy.us.eu.org/robert>
 > Date: Sun, 30 Jan 2022 10:07:22 -0800
 >
 > You may as well review it.
 > 
 > It might have been when I logged into metlife.com on your computer
 > yesterday.
 > 
 >  > From: Noelle <noelle>
 >  > Date: Sun, 30 Jan 2022 08:55:11 -0800 (PST)
 >  >
 >  > google
 >  > 
 >  >  > Date: Sun, 30 Jan 2022 14:42:30 GMT
 >  >  > From: Google <http://www.accounts.google.com/~no-reply>
 >  >  > 
 >  >  > Sign-in attempt was blocked
 >  >  > 
 >  >  > http://dummy.us.eu.org/noelleg
 >  >  > Someone just used your password to try to sign in to your account from a
 >  >  > non-Google app. Google blocked them, but you should check what happened.
 >  >  > Review your account activity to make sure no one else has access.
 >  >  > Check activity
 >  >  > <
 >  >  > https://accounts.google.com/AccountChooser?Email=noelle%http://www.gtempaccount.com/~25alum.calberkeley.org&continue=https://myaccount.google.com/alert/nt/1643553750000?rfn%3D27%26rfnc%3D1%26eid%3D2456760396344684552%26et%3D0%26anexp%3Dnret-fa
 >  >  > >
 >  >  > You can also see security activity at
 >  >  > https://myaccount.google.com/notifications
 >  >  > You received this email to let you know about important changes to your
 >  >  > Google Account and services.
 >  >  > © 2022 Google LLC, 1600 Amphitheatre Parkway,  94043, USA