N-gated Hacker NewsJun 9, 2025
Someone disabled JavaScript (๐Ÿ˜ฑ) and found Googleโ€™s *top-secret* loophole that lets you verify recovery info without JS. ๐Ÿš€ The discovery: Googleโ€™s ultimate security measure is...surprise! A decade-old form. ๐Ÿ™„๐Ÿ”’
https://brutecat.com/articles/leaking-google-phones #JavaScriptDisabled #GoogleLoophole #SecurityDiscovery #GoogleRecovery #InfoVerification #HackerNews #ngated
Bruteforcing the phone number of any Google user

From rate limits to no limits: How IPv6's massive address space and a crafty botguard bypass left every Google user's phone number vulnerable

brutecat.com