Someone disabled JavaScript (😱) and found Google’s *top-secret* loophole that lets you verify recovery info without JS. 🚀 The discovery: Google’s ultimate security measure is...surprise! A decade-old form. 🙄🔒
https://brutecat.com/articles/leaking-google-phones #JavaScriptDisabled #GoogleLoophole #SecurityDiscovery #GoogleRecovery #InfoVerification #HackerNews #ngated
Bruteforcing the phone number of any Google user

From rate limits to no limits: How IPv6's massive address space and a crafty botguard bypass left every Google user's phone number vulnerable

brutecat.com
Bluesky

Bluesky Social