YSK: Google's Default 2FA/MFA is extremely weak, only if you sign up for their "Advanced Protection" option will simple attacks

[rcmaehl]

As I've posted elsewhere before and HOPEFULLY isn't directly relevant (although I could only imagine the number of FIDO keys required): 

 

Why YSK: Google does not protect against Cookie Hijacking, Authentication Changes via API, and other attack vectors that 2FA/MFA on other sites protect against. If someone steals your cookie, they can change your settings, log you out, and completely hijack your account, even with 2FA/MFA enabled. Only their Advanced Protection (https://landing.google.com/advancedprotection/) option, requiring multiple physical hardware FIDO keys, will protect you against a full account hijacking.

 

 

[TXPer]

I think lmg run some sussy file and they login credentials, cookies etc. got send to hackers. Also i think they should have individual pc with clean os (some linux best) and use this pc only for video upload.

[Mojo-Jojo]

15 hours ago, TXPer said:

I think lmg run some sussy file and they login credentials, cookies etc. got send to hackers. Also i think they should have individual pc with clean os (some linux best) and use this pc only for video upload.

Linux and MacOS can be affected by viruses all the same. If it can run software, it can run malware.

 

Plus, this is speculation.