3 ms·
This is a big deal, nobody would expect Google to fuck up this badly, least of all the parties who support Google's social login. That means that, even if you
by breakingcups 2y ago
This is a big deal, nobody would expect Google to fuck up this badly, least of all the parties who support Google's social login.
That means that, even if you don't want anything to do with Google at all, others could have impersonated you by registering a Google Workspace trial account on your email address, "verifying" their account through this vulnerability, and logging in to third-party sites (that support Google login) by using your email address.
- mystified5016 2y ago> nobody would expect Google to fuck up this badly This isn't the first time something like this has happened at google. This is like the third "gain access to google resources in an workspace you don't own" exploit in the last year. This should be expected at this point.