After 11 years of life, Google Authenticator has added cloud backups for OTP keys in version 6.0.

Google Security Blog: Google Authenticator now supports Google Account synchronization

This is surprising news to me, because historically Authenticator had no way to backup keys by design. Here's a 2017 quote from a Google engineer who maintains Authenticator:

There is by design NO account backups in any of the apps. ^[source]

This design choice always made sense to me, as the point of 2FA is that you've got (1) something you know, and (2) something you have. The second factor should be tied to a physical device. If you lose the physical device, the second factor should be gone, and you'll need to use one of those 10-ish backup codes that we all definitely keep somewhere safe. I'm quite befuddled that Google is reversing this design choice and walking back their previously strong, security-centric design for the sake of user convenience in the case of a lost phone. I used to advise my friends and family to choose Google Authenticator over Authy for this specific reason.

If you want further reading, here's a PCWorld article with an altogether different tone than Google's announcement: Google Authenticator’s long-awaited cloud 2FA feature carries hidden risk

Yesterday, Adsense support sent an email to their users regarding their upcoming policy changes. This primarily affects how subdomains are monetized. Going forward, your subdomains inside the primary domains in the "Sites" section (www, etc.) won't be allowed, any existing ones will be removed and their rules will be merged with the primary domain (such as example.com).

Furthermore, what constitutes a "Site" will also change henceforth. You can only add a primary domain (such as example.com) and the subdomains which are listed on the public suffix list (such as github.io, blogspot.com, etc.). Thus, your own subdomains (such as xyz.example.com or www.example.com) won't be allowed in Adsense.

I don't know what they will achieve by doing this considering they already vet and audit each site before approving them for adsense? In any case, other alternatives to Adsense exist such as Propeller Ads, CJ Affiliate, etc. for those affected by this move but I don't know their efficacy.

[SOLVED]

Thank you so much for everyone's support and suggestions, it seems that I may have overreacted a little bit. One of the things that I did was send a form to Google, but the form was not really for this issue, so I wasn't hopeful at all. To my surprise, I received a message just now with instructions to recover the account and change the 2-factor phone number to my mother's current one. The cause of the issue is not clear, but whatever it was, they sorted it out. She is obviously ecstatic, when I went to her house two days ago I couldn't disguise my pessimism.

I set her recovery email to my own and will generate recovery codes shortly, so we're good for now. I instructed her on how to download all her data from Google (it's easier than I thought), just because this made her quite paranoid, and I'll take the opportunity to gradually move my family out of Google, as well as myself. Thanks for being so supportive, this was very stressful, to say the least! Sometimes it's nice to know we're not alone ;)

Original post

So, for some reason Google logged my mother of everything at once: browsers in two laptops and two smartphones (one Android and one iPhone). Trying to recover the account sends a message to a cellphone number she no longer has. I understand Google is basically unreachable, but there must be something I can do, right? We're not famous, but she does pay for YouTube Premium.

I subscribe to quite a few youtube channels to get notified when there are new videos posted. I've had this set up for several years.

Today I tried to add a new channel I've discovered. My RSS reader informs me it's blocked. I check all the other youtube feeds. Every single one of them reports "Error transferring <feed url>." server replied Forbidden (201).

Update: One day later and every feed is connecting and transferring again. It seems to be a temporary block. My IP address has changed overnight though so that's still my main suspicion.

It seems like I'm not the only victim

That contains a link to the author's issue on google's issue tracker

The official response is

https://stackoverflow.com/questions/29752447/how-to-get-a-youtube-channel-rss-feed-after-2015-april-20-without-v3-api


They completely misunderstood the question - it's not asking how to find a feed, it's asking why that feed is getting blocked.

Not only this but using DuckDuckGo bangs for to search google get randomly sent to a captcha page - issuing the exact same query a second time goes through perfectly. The same is happening with keyword searches I set up in my browser. .

Any ideas what to do about this?

So sick of google's monopoly.

I'm starting to get tired of being complacent about the fact that I am using Google's services when I'm well beyond the 'reasonable doubt' phase of Google being evil. They're a giant monopoly and I want to stop making them money as much as I possibly can.

Thankfully, I'm not as badly intertwined with them as I could be; I have already downloaded all the music I bought from them and since I have switched to iPhone, I'm not reliant on too many of their services. They do have some of my old files and pictures, but that shouldn't be too hard to get out. The biggest problem I can see is my email. Right now I'm actually paying $4/mo for an Amazon WorkMail account for a failed venture (which I'm planning on getting rid of), but I'm sure there are much better alternatives out there. I'd prefer something that has good spam filtering options including custom filtering. I was also wondering if anyone would recommend Apple's email service since I'm already paying for iCloud+ to store my backups.

Another more specific recommendation I need is for a replacement to Google Authenticator that works on iPhone. It looks like there are several options but I'm frankly not sure how to evaluate them.

If you have any other resources you'd like to share, please feel free to share.