In a moment of distraction, I fell for a phishing phone call and compromised my Google account. It took me 13 minutes to realize how catastrophically stupid I am and begin frantically changing passwords. I've run the official Google "secure your account" process probably 10 times (though 9 of those times there was nothing to do). I've checked all my financial info, changed passwords on all sorts of things. As far as I can tell, other than gaining access to my Gmail, I don't think anything else was compromised.

How boned am I? I've got 2FA on basically anything remotely important, and I've had decent password hygiene (although I do use the Google password manager, so that's probably comprimised). Is there something else I should do or be on the lookout for?

Iranians right now are using a javascript based proxy to access the internet somewhat, it's what i'm using to access tildes.

I thought it'd be interesting to share, we don't have access to script.google.com but we do have access to www.google.com, so there's another method to access it and set it up.

Someone wrote a quick android app for it. link

It's limited from google's side as they've put a 20,000 requests daily limit on scripts, but it gets us online somewhat and... feels nice, to be able to have a way through.

We're also using github actions to download files to private repo's and download them from there (releases is still blocked, raw is not) which also seems to have a 2000 minute monthly limit.

From one side google colab also has Iran sanctioned so we can't access that, but that would be another way to get online aswell.

From another side we're also using DNS servers to tunnel traffic, but they get blacklisted after the user count goes up.