Btb. Thank you !
Bruteforcing the phone number of any Google user
161–170 of 204 posts
Re: Bruteforcing the phone number of any Google user
#162Earlier quoted context omitted.
g has been demanding a valid phone for years, as have most other major providers. if you lose the number you sign up with, you can potentially get locked out of the account. whats your mo?
Not sure how it looks in USA, but in EU you can get a prepaid SIM card for $2 and use it forever for cases like this. You'll probably have to top it up with another $1-2 if used sparingly, but that's the price of such separation.
Where in the EU? The best I've found in Ireland requires adding €5 of prepaid credit at least every six months to prevent the number from being deactivated. As of yet, I have not managed to automate it.
Re: Bruteforcing the phone number of any Google user
#1632025: https://qbix.com/blog/2025/06/06/%e2%80%9cno-way-to-prevent-... 2023: https://qbix.com/blog/2023/06/12/no-way-to-prevent-this-says... 2021: https://qbix.com/blog/2023/06/12/no-way-to-prevent-this-says... Which is funnier?
You used the same link for 2023 and 2021.
Should probably be https://qbix.com/blog/2021/01/25/no-way-to-prevent-this-says...
Re: Bruteforcing the phone number of any Google user
#164[dead]
Re: Bruteforcing the phone number of any Google user
#165Earlier quoted context omitted.
This is why I don't use a real phone number with any of these services. They don't need my phone number to operate either.
g has been demanding a valid phone for years, as have most other major providers. if you lose the number you sign up with, you can potentially get locked out of the account. whats your mo?
I lost my hotmail account I had for years due to losing my phone number. My boss at one point said he would pay for me to have a cell phone, not for work purposes or to contact me just as a perk of working there hey here is a personal cell phone on me so you don't have to pay for one.
All good and he let me get the first iphone that came to Canada the 3g and it was awesome. Left that job years later and didn't think far ahead enough that I needed that phone number to get into my account should I have an issue. Well I did and tried all the recovery methods with no luck. Sad thing is I still get occasional emails forwarded from that account, haven't seen one in a long while but was still getting them for years. Hurts a lot to have lost it. The screw up that compounded my loss was I guess I was paranoid about giving my personal information online back in the day. So my name I used was John Fokendoe. And some made up birthday. So I could not remember all the info I entered and years and years lost.
For my google I downloaded the backup codes in Case I lose access to my phone. They sit in a folder safe and there if I ever need to recover the account.
Re: Bruteforcing the phone number of any Google user
#166Earlier quoted context omitted.
Their own policies place a limit on how "demanding" they can be. Initializing a new (or power-washed) android/ChromeOS device _requires_ a Google account, so if you don't have one (or claim not to) they device initialization process will generate a new Google account for you. Even if there's no phone number or SIM card in the device. I've had a number of Android/ChromeOS devices over the years, and I've had each one…
Initializing a new (or power-washed) android/ChromeOS device _requires_ a Google account It's been a while since I've had to look at Android in any detail, but I remember that not being necessary, and a quick search online suggests that to still be the case today.
Are you saying it's as simple as clicking the "proceed without a google account" button and I've just failed to notice the option each of those times?
If there's a non-obvious workaround, why not post a link to it?
"Just Google it" isn't as easy as it used to be...
Re: Bruteforcing the phone number of any Google user
#167Off topic, it was very interesting to peek into libphonenumbers metadata. I find it curious that we have so many ways to write down an already standardized identifier.
Re: Bruteforcing the phone number of any Google user
#168This article highlights something interesting... it is quite common to get at least one /64 IPv6 block from a hosting provider or ISP. Yet most of the rate-limiting and IP blocking is done for a single IP. Sounds like when dealing with IPv6, an entire block of /64 should be rate-limited or blocked.
Even companies which not only should know better, but are actually paid to handle things like this get it hilariously wrong. The company I work for is a client of a big-ass CDN you've heard of (not the one whose ceo hangs around these parts). Yet, they somehow think it's fine to notify me of "new connections from an unusual IP" when I connect from the same /64 block of ipv6.
It's easier to reuse existing code and simply bump the number of digits required to store the IP address.
Re: Bruteforcing the phone number of any Google user
#169Earlier quoted context omitted.
Not sure how it looks in USA, but in EU you can get a prepaid SIM card for $2 and use it forever for cases like this. You'll probably have to top it up with another $1-2 if used sparingly, but that's the price of such separation.
Where in the EU? The best I've found in Ireland requires adding €5 of prepaid credit at least every six months to prevent the number from being deactivated. As of yet, I have not managed to automate it.
Can't definitely find it, but in Orange Poland prepaid offer it costs ~$7 (29 PLN) to prolong the account for 365 days (regardless whether it is topped up or not), but it has to be activated manually, it is not the "normal" way to use a prepaid plan tbh.
Re: Bruteforcing the phone number of any Google user
#170Earlier quoted context omitted.
Their own policies place a limit on how "demanding" they can be. Initializing a new (or power-washed) android/ChromeOS device _requires_ a Google account, so if you don't have one (or claim not to) they device initialization process will generate a new Google account for you. Even if there's no phone number or SIM card in the device. I've had a number of Android/ChromeOS devices over the years, and I've had each one…
They can just take your number anyway if you ever insert a SIM, since they control "your" phone.
Interestingly, your phone number is actually not stored on the SIM card. It instead holds a globally unique ICCID number which your operator links to your account (phone number) on their systems.
This actually makes it possible to transfer your phone number between SIM cards or even operators, and means your cell phone is blissfully unaware of its own phone number.