3 ms·
This leaves so many open questions. Foremost: How did they guess his GMail password? Is there a way to access GMail without knowing the password? Ie. by sending
by jcfrei 12y ago
This leaves so many open questions. Foremost: How did they guess his GMail password? Is there a way to access GMail without knowing the password? Ie. by sending a reset password per SMS?
- onewaystreet 12y agoThey enabled call forwarding and got Google to call with a password reset code.
- jcfrei 12y agoThanks. I think I'll remove my phone number as a backup option.
- geofft 12y agoGoogle periodically prompts me on login to add my cell phone number to increase my account's security. I think someone confused about what "increase" means. (And this is all the more surprising because in general I see all sorts of parts of Google making great end-user security decisions.)
- Buge 12y agoIt probably increases security for the average user, but decreases it for a targeted user.
- delecti 12y agoSo in order to prevent that attack vector, I need to make sure my phone isn't set up to receive calls to recover my account?
- neomech 12y agoIts not clear how they got his phone number though.
- mdavidn 12y agoPhone book? Leaked address book? Leaked account database? Assume your phone number is public knowledge.
- TheLoneWolfling 12y agoHe said his gmail account was basically firstname lastname - given a name someone determined can generally make a fairly good guess as to phone number. Phone books, etc, etc.