In a moment of distraction, I fell for a phishing phone call and compromised my Google account. It took me 13 minutes to realize how catastrophically stupid I am and begin frantically changing passwords. I've run the official Google "secure your account" process probably 10 times (though 9 of those times there was nothing to do). I've checked all my financial info, changed passwords on all sorts of things. As far as I can tell, other than gaining access to my Gmail, I don't think anything else was compromised.

How boned am I? I've got 2FA on basically anything remotely important, and I've had decent password hygiene (although I do use the Google password manager, so that's probably comprimised). Is there something else I should do or be on the lookout for?

Iranians right now are using a javascript based proxy to access the internet somewhat, it's what i'm using to access tildes.

I thought it'd be interesting to share, we don't have access to script.google.com but we do have access to www.google.com, so there's another method to access it and set it up.

Someone wrote a quick android app for it. link

It's limited from google's side as they've put a 20,000 requests daily limit on scripts, but it gets us online somewhat and... feels nice, to be able to have a way through.

We're also using github actions to download files to private repo's and download them from there (releases is still blocked, raw is not) which also seems to have a 2000 minute monthly limit.

From one side google colab also has Iran sanctioned so we can't access that, but that would be another way to get online aswell.

From another side we're also using DNS servers to tunnel traffic, but they get blacklisted after the user count goes up.

I forgot my driver's license today but had my phone with me. I remembered seeing stories that google and apple both allow these (for some states) in the digital wallet.

Before doing this, I thought I would ask people here to weigh in on whether it is a good idea. Is it considered secure? Is it going to cause me more privacy issues than a physical card in my wallet?

This is also related to recent discussions about online age verification.

This is a related Tildes post from last year: Google Wallet adds age verification and more government ID support

so like most of the community, I wanted to do a dance when I saw https://tildes.net/~tech/1t09/motorola_and_grapheneos_foundation_partnership_announced. However I have a Google Pixel 6 and according to this page, that stops getting security updates this October.

now what I can't tell is is it a better idea to wait for the new moto+grapheneOS phone or bite the bullet and buy a supported pixel. I don't know if anyone know how long until a moto+grapheneOS phone actually hits the market. If it's next year, not a big deal to wait. If it's 2+ years, I get worried about missing out on security updates.

Not sure the best course of action, security wise.