Live data from Hacker News

Bruteforcing the phone number of any Google user

brutecat.com

1–10 of 204 posts

Re: Bruteforcing the phone number of any Google user

#4
It must be a daunting chore to maintain all the legacy pages. The amount of now-years-old stuff that long-standing sites have to maintain, or choose to maintain, is shockingly high, and testing the combination of all that stuff is impossible.

If you want an example of how diverse in age these apps are, dig around in the Gmail settings panel. Eventually you will land on a popup that uses the original Gmail look and feel, from 2004.

Re: Bruteforcing the phone number of any Google user

#5
post #4

It must be a daunting chore to maintain all the legacy pages. The amount of now-years-old stuff that long-standing sites have to maintain, or choose to maintain, is shockingly high, and testing the combination of all that stuff is impossible. If you want an example of how diverse in age these apps are, dig around in the Gmail settings panel. Eventually you will land on a popup that uses the original Gmail look and fe…

> It must be a daunting chore to maintain all the legacy pages.

Clearly $350 billion revenue in 2024 is not enough...

Re: Bruteforcing the phone number of any Google user

#6
post #4

It must be a daunting chore to maintain all the legacy pages. The amount of now-years-old stuff that long-standing sites have to maintain, or choose to maintain, is shockingly high, and testing the combination of all that stuff is impossible. If you want an example of how diverse in age these apps are, dig around in the Gmail settings panel. Eventually you will land on a popup that uses the original Gmail look and fe…

> It must be a daunting chore to maintain all the legacy pages

I always wonder who's the one maintaining the "poke" feature in Facebook.

Re: Bruteforcing the phone number of any Google user

#7
post #6
post #4

It must be a daunting chore to maintain all the legacy pages. The amount of now-years-old stuff that long-standing sites have to maintain, or choose to maintain, is shockingly high, and testing the combination of all that stuff is impossible. If you want an example of how diverse in age these apps are, dig around in the Gmail settings panel. Eventually you will land on a popup that uses the original Gmail look and fe…

> It must be a daunting chore to maintain all the legacy pages I always wonder who's the one maintaining the "poke" feature in Facebook.

I thought it was gone but I’m reading it was just hidden but re-added to the UI in 2024. That was always my favorite feature haha.

Re: Bruteforcing the phone number of any Google user

#8
> This time can also be significantly reduced through phone number hints from password reset flows in other services such as PayPal, which provide several more digits (ex. +14•••••1779)

I've never thought about this but it's extra scary. If you have the same phone number and email address with enough services and they all mask in a different order for reset hints...

Re: Bruteforcing the phone number of any Google user

#10
post #8

> This time can also be significantly reduced through phone number hints from password reset flows in other services such as PayPal, which provide several more digits (ex. +14•••••1779) I've never thought about this but it's extra scary. If you have the same phone number and email address with enough services and they all mask in a different order for reset hints...

what’s the risk? your email being made public? your phone number?
Post reply on HN