How I hacked a gmail account

#1

Post by tawrahim » Fri, Oct 21, 2016, 12:46 PM UTC

Re: How I hacked a gmail account

#2

Post by mtgx » Fri, Oct 21, 2016, 1:20 PM UTC

> After my first attempt, Google asked me to provide them with my phone number so that they could send me a security code to login.

What? Like any number? His number? Google doesn't even verify if it's the Gmail owner's phone number? This can't be right.

Re: How I hacked a gmail account

#3

Post by blakep » Fri, Oct 21, 2016, 1:40 PM UTC

mtgx wrote: post #2

> After my first attempt, Google asked me to provide them with my phone number so that they could send me a security code to login. What? Like any number? His number? Google doesn't even verify if it's the Gmail owner's phone number? This can't be right.

Agreed, I think the title is probably incognito click bait for this guy's app. I find little value in this article.

Re: How I hacked a gmail account

#4

Post by redxblood » Fri, Oct 21, 2016, 2:08 PM UTC

That same search he did gives

"We could not perform this search

Must include at least one user, organization, or repository"

Is this guy lying?

Re: How I hacked a gmail account

#5

Post by tawrahim » Fri, Oct 21, 2016, 2:14 PM UTC

redxblood wrote: post #4

That same search he did gives "We could not perform this search Must include at least one user, organization, or repository" Is this guy lying?

To the left, click on code and you are going to see all the results

Re: How I hacked a gmail account

#6

Post by tawrahim » Fri, Oct 21, 2016, 2:19 PM UTC

blakep wrote: post #3

mtgx wrote: post #2

> After my first attempt, Google asked me to provide them with my phone number so that they could send me a security code to login. What? Like any number? His number? Google doesn't even verify if it's the Gmail owner's phone number? This can't be right.

Agreed, I think the title is probably incognito click bait for this guy's app. I find little value in this article.

@Author here - value is that don't commit sensitive data like email and password into your public github repo. Consider using an ENV variable

Re: How I hacked a gmail account

#7

Post by redxblood » Fri, Oct 21, 2016, 2:21 PM UTC

tawrahim wrote: post #5

redxblood wrote: post #4

That same search he did gives "We could not perform this search Must include at least one user, organization, or repository" Is this guy lying?

To the left, click on code and you are going to see all the results

I was in "best match" in the filters, my bad

Re: How I hacked a gmail account

#8

Post by blakep » Wed, Oct 26, 2016, 11:35 PM UTC

tawrahim wrote: post #6

blakep wrote: post #3

Earlier quoted context omitted.

Agreed, I think the title is probably incognito click bait for this guy's app. I find little value in this article.

@Author here - value is that don't commit sensitive data like email and password into your public github repo. Consider using an ENV variable

You didn't address the comment above this. What phone number did you use?