Just me who finds this really strange and has a lack of verification?

Android remote lock device feature, when enabled allows you to lock the device remotely with just the phone number.......BUT, you don't need to be logged into Google find my device, ANYONE can input a phone number.....

Note that I am not signed in for the below lock request.

I feel you should have to be signed into an account that has the associated phone number? Or just signed in to any account (so there is a record of who sent the lock request?)

I get that it's for if you get it stolen and need to lock it quickly, but surely someone can just spam this request to be very annoying to random people 🤣

Poor Internet Archive, getting breached and then not rotating all of their auth tokens correctly..... leading to further chaos

https://www.bleepingcomputer.com/news/security/internet-archive-breached-again-through-stolen-access-tokens/

#threatintel #cybersecurity

C'mon SolarWinds....

"Critical hardcoded SolarWinds credential now exploited in the wild"

https://www.theregister.com/2024/10/16/solarwinds_critical_hardcoded_credential_bug/

#threatintel ##cybersecurity