Hacked Gmail Account
The key part of the blog post for me is this: "To mitigate the risk, Google recently launched two-factor authentication, a mechanism that requires you to input, on top of your password, a code generated by an application installed on your phone (iPhone, Android and maybe some others). I have activated this today."<p>Anyone savvy enough to hang out on HN probably has a fair amount of valuable info in their Gmail account (domain registration info, passwords/access to shopping sites, etc.) and should activate two-factor authentication: <a href="http://googleblog.blogspot.com/2011/02/advanced-sign-in-security-for-your.html" rel="nofollow">http://googleblog.blogspot.com/2011/02/advanced-sign-in-secu...</a><p>Is it a little more hassle? A bit. But when someone else tries to log in from a new IP address in the Ivory Coast, or China, or wherever--they'll be prompted for a PIN and won't be able to log in.<p>I activated two-factor authentication as soon as I could on my Gmail. I think everyone reading this comment should too.