Omar Needs Your Help.

[buffcoat]

So glad you weren't lambasted!

[Omar]

WiFi could be a source, if it's a bogus hotspot.  But did you use the same password on the previously-hacked Recidivism website as any of your emails?  Then, a bad guy could search through your email for further passwords and more opportunities for malice.  That, or malware on your actual computer.

I checked my computer for malware and there was nothing (I use the avast! anti-virus software and also scanned using malwarebytes).  I have a recidivism.org address that forwards to my primary Gmail account.  My username/password combos for the Recidivism Movable Type account/FTP site has never matched any of my other email accounts. 

The timing of the hacking seems to suggest that the attempts to use the Wi-Fi is the culprit, but who knows.  Can I sue AirTran?  I changed all my passwords to fetidbeetroot so I should be fine for awhile at least.

[Martin]

Good to have you back, Omar. And in one piece, no less.

[moonshake]

If you access Gmail with your web browser, make sure you select "Always use https" in Settings > General so your Gmail password and other passwords you might have stored in your mailbox aren't flying through the internet in clear text.

[Sarah]

I just went to my gmail account to do this and read the following:  "We've recently made the 'Always use https' setting the default behavior in Gmail (the default used to be http)." 

[moonshake]

I just went to my gmail account to do this and read the following:  "We've recently made the 'Always use https' setting the default behavior in Gmail (the default used to be http)." 

Let it be known that I was doing this way before they made https the default setting.

[Martin]

Just checked my settings: the option for https was still there. Is there any reason why you shouldn't do the https thing? I check my gmail on my laptop 90% of the time.

[moonshake]

Just checked my settings: the option for https was still there. Is there any reason why you shouldn't do the https thing? I check my gmail on my laptop 90% of the time.

I can't think of a reason why you wouldn't. It does, in theory, take more processing power on both ends, because there's encryption/decryption and a security certificate involved but you won't notice it.

[Martin]

Thanks; done!

[Omar]

Thanks -- I made sure this was selected on my recovered Gmail account and a new one I set up as a backup.  My previous backup Gmail account was compromised and Google won't give it back because I am unable to answer their recovery questions to their satisfaction.  I barely used it, so if it's gone, so be it, as long as it's not being used to extract cash.

My sister told me that her friend's Dad actually wired someone money as part of a similar e-mail scam about a year ago.

This is what happens when bastard companies like Microsoft, Facebook, and Google run amok while the likes of Geocities go under.  I'd Ask Jeeves about all of this, but he's passed out after too many sniffers of brandy.

[Sarah]

Just checked my settings: the option for https was still there.

I imagine this is so that those who for some reason want regular old http can make that choice and then change their minds later.  Gmail says https is now the default.

[moonshake]

This is what happens when bastard companies like Microsoft, Facebook, and Google run amok while the likes of Geocities go under.  I'd Ask Jeeves about all of this, but he's passed out after too many sniffers of brandy.

Worry not. I'm working on something called DracMail. Not only will it make a pleasantly caressing sound whenever you receive a new e-mail, but it will also be 100% secure and unhackable by scammers, phishers, snoopers, terrorists or governments. ETA: 2023 A.D.

[Wes]

I was able to restore access to my primary Gmail account quickly, although not before many people I know had some interesting e-mail exchanges with this cretin.  There does not appear to be anything compromised in my actual Gmail account and there is no trace of any e-mails to/from the cretin. He also took hold of a Hotmail account I haven't used in about five years and another rarely-used Gmail account.

They still have the real Omar, and you all ignored his hidden plea for help! He did get kind of sloppy with where he put the d and the final s and e, though, so serves him right.

[erechoveraker]

I got this email the other day, wondered what it was about. I made a dicky reply, didn't make the connection to Omar though from the name on the email. Dur.

[Stupornaut]

They must be targeting FOTs, because I got hit with this crap tonight. Somehow they were able to get into both my gmail account and the hotmail account I'd used as a backup for emergency password recovery, so I'm all kinds of screwed.