Google’s Authentication Blunder: Phone Numbers Exposed Faster Than a Speeding Bullet
A researcher known as Brutecat cracked Google’s authentication system, exposing users’ phone numbers in record time. With just an email address, Brutecat’s clever exploit had phone numbers popping up faster than popcorn—just 15 seconds in the Netherlands! Google quickly patched it, but Brutecat only got $5,000. Talk about a bargain!
Hot Take:
Google’s authentication system had a security hole wide enough to drive a truckload of phone numbers through. Thanks to our white-hat hero, Brutecat, the bug was spotted, and Google awarded them with the equivalent of a fancy Starbucks gift card for their troubles. Talk about a bargain!
Key Points:
– A flaw in Google’s authentication allowed brute-force attacks to reveal users’ phone numbers.
– The issue involved exploiting Google’s account recovery process and Looker Studio.
– Brutecat, the researcher, found a way to bypass Google’s security using cloud resources.
– Google fixed the flaw, awarding Brutecat $5,000, which was considered a modest bounty.
– The whole process of exploiting the flaw varied in time across different countries.