= 27d567bc2d48d9f40e9ccc20ea370b15)
JQuinton comments on Open Thread April 8 - April 14 2014 - Less Wrong
You are viewing a comment permalink. View the original post to see all comments and the full post content.
= 783df68a0f980790206b9ea87794c5b6)
Loading…= b715d02e85f7b3b4ae65ca3d3e450868)
Subscribe to RSS Feed
Powered by Reddit
= f037147d6e6c911a85753b9abdedda8d)
You are viewing a comment permalink. View the original post to see all comments and the full post content.
Comments (242)
I have friends who do security at Google, and they explicitly told me "we don't think the company was vulnerable and you don't need to change your GMail password." So as near as I can tell, the third-party sites and Google, inc, disagree about whether Google is vulnerable here.
I checked my Gmail login locations after I heard about Heartbleed and saw one location that was obviously not anywhere I had been in the last month. So based on that information I assumed that Gmail was compromised and changed my password.
How often do you check your login locations?
It checks for you, by the way, and will block an attempt and notify you if it looks suspicious. This happened to me earlier this month. Interestingly, that happened 4 days after the vulnerable OpenSSL version was released and my Gmail password is basically the only the one which I do not reuse anywhere and I don't know how anyone could have gotten it... Still more likely to have been a keylogger or something.