#Ios account manager google full#
#Ios account manager google password#

If this was an attack, the results seem odd. It raises my suspicions that this particular attack may have been accomplished using a vulnerability within Google’s architecture and not directly on my account credentials. The lack of an e-mail for the iOS device is what disturbs me the most. I find this unlikely since my e-mail server has significantly lower false positives for spam than G-mail’s.

#Ios account manager google password#

I do run my own e-mail server, so it is possible my password was compromised and I simply missed the new device e-mails. That would make the most sense, and I’d be willing to entertain the idea if it wasn’t for the fact that I didn’t recognize the first mysterious video, auto-play is disabled on my account and that I had a mysterious iOS device authorized. I had auto-play enabled, someone sent me a link for a garbage shitty pop song and I started listening and walked away from my laptop. There is nothing unexpected in my Google Search history for that time period and nothing odd on my Google payment history. The mysterious You Tube videos, over 70 of them, start May 4th at 12:30pm and ending at 5:57pm. My location history, device information history and voice/audio activity logging have all been disabled in Google’s account management.

#Ios account manager google full#

There is a possibility one of my Android devices could have been compromised, but that should have only given an attacker access to that device’s security token, not the ability to add new devices, and certainly not the ability to add devices without a notification e-mail.Īlthough a paid Google Apps for Business subscription would potentially give me a full audit history to see the potential damage, a free personal Google account does not. Because Android has no real package management and its system data is stored on a read-only system partition, security updates require considerably more work than on other operating systems and manufactures are known to leave unpatched versions of glibc, openssl and the built-in web browser in the wild for months, if not forever. Although one is on the latest Cyanogen, the other has a locked boot loader and is dependent on the few and far between updates from the manufacturer. I haven’t yet re-authorized any of my Android devices.

I currently don’t have two factor authentication, but I’m curious if this device would have still been connected if two factor was enabled. There isn’t even a suspicious login attempt e-mail. Yet there is no e-mail for this mysterious iOS device. I verified that I have received an e-mail every time I’ve re-flashed or added a new device to my Google account for at least the past year:Į-mail Google notifications for account changes Could I have inadvertently entered it into a phishing site without realizing it? Another thing that is puzzling stems from a security mechanism Google has that e-mails users whenever they add a device. It’s not written down anywhere or stored digitally on any of my systems. I use a secure password algorthym and my Google password isn’t used for any other sites. I haven’t owned any Apple productions since my MacBook was stolen two years ago, so I immediately revoked access to that account and changed my password.Ĭrappy pop music in my YouTube history that I've never played I immediately checked my Google account history to look for unauthorized access. I always turn auto-play off, so the presence of these videos in my history was puzzling. The other day I was searching through my YouTube history and discovered a ton of garbage pop music videos that I’ve never viewed. I’m guessing the YouTube plays problem stem from a current issue about paused videos randomly starting in background tabs which I have experienced. When I revoke the iOS device, my chat client disconnects and I am required to re-authenticate. Since it uses undocumented APIs, it must identify itself as an iOS device.

Update: It turns out the mysterious iOS device was due to the fact I was using purple-hangouts to connect to Google’s chat service. There's an iOS device attached to my Google account and I don't own any Apple products