3 ms·
I don't understand why so few comments mention that the "last chance form" is a huge security hole. It seems like most of the information for filling it can be
by yaakov34 15y ago
I don't understand why so few comments mention that the "last chance form" is a huge security hole. It seems like most of the information for filling it can be seen by someone over my shoulder as I use Gmail. And it's apparently completely automated and can be tried multiple times. I use a strong passphrase and two-factor authentication for a reason, and this defeats it. I already disable the "secret questions", since I don't want cracking the account to be much easier than cracking the passphrase.
I would like Google to give me an option to disable the "last chance form" for my account. Or, if they inisist, I'd like the "last chance" to be to fly to Mountain View and show Google my passport or a court order.
EDIT: and for extra bogusness, it seems that the information needed for the "last chance form" can't be changed if it's compromised. I mean, I can change my passphrase if I suspect it leaked, but how do I change the date when I started using Gmail? Sounds like the best thing to do the moment a Google account is compromised is to close it.
- Tichy 15y agoExcept you can't close it anymore.
- yaakov34 15y agoI meant closing it after going through the "last chance" form. Although it wouldn't surprise me if someone could go through it again and reopen it. Also, if you left a computer with a Google login where someone could access it (not smart, but people can slip up), then I guess the paranoid/high security thing to do would be to close the account, since there is no way to know when the gathered information would be used to access it. Changing the password would be worthless.