May 8, 2010

Security breaching in my Google account

Last day, I tried to log into my gmail account other than the usual one of Richa Sorot and I rarely open, and guess what? I found that it has been hacked. Its password was changed. I tried my facebook but agin hacked. I tried to open Orkut and google account also but all in vain. I tried some sort of techy ways and found that actually the google itself was a little bit confused weather the account even exist or not. I tried to send an e-mail to my account but mailer-demon replied that account does not exist and permanent failure in the delivery of e-mail. But when I tried to create another account with the same name, which google claims that it does not exist, this time it says that account already exist and username was not available. For some time, my lovely brain also stunned. Already the tension was that "How the hell can someone breach into my security?" but after all this is just a machine. The codes can be broken. The security can be breached. And when the news of chinese hackers hacking major India websites like those of residents next to the President of India, and compromising the defence websites like those of "Army Institute of Technology, Pune" for several months and recovered in tedious ways, everything is possible.
The link for that famous news clip is here
http://timesofindia.indiatimes.com/India/Made-in-China-Cyber-spying-system-with-focus-on-India/articleshow/5891039.cms
How much google pays to its employees isn't the point of concern. But this time, both google and Yahoo had to retreat from China, this is bitter truth for security consultants.

Two days back, our college became Wi-Fi enabled. We were to fill up a form before getting the connection to authenticate the individual Server Proxies for our lappies and stating that "I wil be the sole responsible for any breaching of security through my IP address." And again to the shock of college, me and my colleague came to know the passcode key using just a simple facility of Windows-7, which the administration does not provide to any of the users. We won't misuse the key but of course, it was as easy as snatching a lolypop from a kid". And now we know how to keep our keys from broken. Well, the basic funda to of ethical hackers is "To learn how to defend, you need to know how to attack". :)

Well, after several hours, I was able to recover my G-mail and once the g-mail, my backbone of all other appendages of social networking was recovered, I immediately changed my passwords. Then I started to find out after all, where from my gmail was broken. Although, I tried some more complex ways but here are two simplest methods to keep an eye on your accounts and check if it is under your hands or not.

1) Open the g-mail (not in the basic HTML mode) and at the bottom of the inbox mails, you will see a statement pointing out your current IP address of the server and besides it, there is a small link "details". Click on it. There you will find the IPs of servers where from your account was opened most recently. And in my case, the most unusual activity was that on May 2, my account was opened from Punjab. Later on I found that the specific place belongs to somewhere close to Sangrur. May it be just the server or may it be just a proxy for Delhi servers. I instantly recalled that I share the password for my e-mail with my boyfriend. But he is far far from Sangrur. Well, I still need to find out what's the matter, very soon.

2) Open your Google account (not g-mail account). There if you havn't added the tool of 'Web History', enable it now. Open it up. My 'Web History' tool stated that on the same day of May 2, a search was made through my account 'How to delete G-Mail'. Now it was sure that whoever he/she was, wasn't much expert in any hacking or such sort of stuff, else this simple thing would have been known to him/her. So, the only way left is that he/she knew my password. And this time also, my index finger pointed to my beloved.

I havn't talked to him regarding this matter yet, but I can't understand why would he do that? Well, that is now a simple and personal-cum-social issue, not a technical one. So, I need not mention that here. Still, this article might help you in some ways to keep on knowing that who and where from, someone is trying to open your accounts without even knowing you.

No comments:

Post a Comment