3 ms·

Do you have a link?

• Svoka 4y ago
  It was looong time ago (2011). You could use app specific password to change master password and disable 2FA, with a script. Funny thing. I had to discover this way myself when I lost my phone with Authenticator App. I took my mail client password and discovered that with some header magic I was able to hijack my own account. I couldn't believed it. So I created another account, protected with 2FA and did same thing. Got gaslighted by Google bug bounty team and decided it's not worth it.