(OT) Google: "Somebody knows your password"

[Xen]

Volker Wysk schreef op 04-08-2017 7:46:

> The links are https://accounts.google.com/... and (enclosed) https://
> myaccount.google.com/... . I assume that they can't fake a google.com 
> domain
> name, right?

If you can be sure you didn't actually visit something else, that is 
correct.

> What's more, I've changed the password in my smartphone and my 
> fetchmail
> configuration, and it works fine with the new password. When the old 
> one was
> still in place, I've got error messages for both.

If you changed through someone else's service it might still have used 
Google to effectuate the change but could have been a simulation around 
it, in that case you indeed did change your password but then the hacker 
would also know the new one and would keep it for reference.

Regards.