A security researcher has discovered a bug that could be exploited to reveal the private recovery phone number of almost any Google account without alerting its owner, potentially exposing users to privacy and security risks.
Google confirmed to TechCrunch that it fixed the bug after the researcher alerted the company in April.
The independent researcher, who goes by the handle brutecat and blogged their findings, told TechCrunch that they could obtain the recovery phone number of a Google account by exploiting a bug in the company’s account recovery feature.
The exploit relied on an “attack chain” of several individual processes working in tandem, including leaking the full display name of a targeted account, and bypassing an anti-bot protection mechanism that Google implemented to prevent the malicious spamming of password reset requests. Bypassing the rate limit ultimately allowed the researcher to cycle through every possible permutation of a Google account’s phone number in a short space of time and arrive at the correct digits.
By automating the attack chain with a script, the researcher said it was possible to brute-force a Google account owner’s recovery phone number in 20 minutes or less, depending on the length of the phone number.
To test this, TechCrunch set up a new Google account with a phone number that had never been used before, then provided brutecat with the email address of our new Google account.
A short time later, brutecat messaged back with the phone number that we had set.
“bingo :),” said the researcher.
Revealing the private recovery phone number can expose even anonymous Google accounts to targeted attacks, such as takeover attempts. Identifying a private phone number associated with someone’s Google account could make it easier for skilled hackers to take control of that phone number through a SIM swap attack, for example. With control of that phone number, the attacker can reset the password of any account associated with that phone number by generating password reset codes sent to that phone.
Given the potential risk to the wider public, TechCrunch agreed to hold this story until the bug could be fixed.
“This issue has been fixed. We’ve always stressed the importance of working with the security research community through our vulnerability rewards program and we want to thank the researcher for flagging this issue,” Google spokesperson Kimberly Samra told TechCrunch. “Researcher submissions like this are one of the many ways we’re able to quickly find and fix issues for the safety of our users.”
Samra said that the company has seen “no confirmed, direct links to exploits at this time.”
Brutecat said Google paid $5,000 in a bug bounty reward for their finding.
Source link
#Google #fixes #bug #reveal #users #private #phone #numbers
![Scientists Found a Continent-Sized Geological Structure Hiding Beneath Antarctica
The East Antarctic Ice Sheet is almost unfathomably huge. Covering about 75% of the entire frigid continent (nearly everything on its side of the Transantarctic Mountains), the sheet covers about 3.9 million square miles (10.2 million square kilometers) and extends down 1.4 miles (2.2 km), on average, before coming into contact with Earth’s surface. At its deepest, the ice plunges down over 3 miles (4.9 km). For decades, scientists assumed that this literally continent-sized block of ice rested on an expansive and stable chunk of Earth’s crust known as a craton. A team of researchers has now complicated that picture—mapping a vast, interconnected geological structure that fans out from a troubling “tectonic deformation.” Beneath this ice sheet, thinner and more geologically recent slices of crusty lithosphere fan out into hidden valleys called “pull-apart basins.” These basins—30 elongated wedge-shaped valleys in total—constitute an entirely new, continental-scale geological region underneath Antarctica, in fact, one which the researchers have named the East Antarctic Fan-Shaped Basin Province (EAFBP). But it’s how they likely formed that has now caught researchers’ attention.
To put it bluntly, it turns out that about 90% of the planet’s fresh water ice may not be on solid ground. Geologist John Goodge called the team’s findings “provocative” in an independent commentary on the new study, published Thursday in the journal Nature Geoscience.
“East Antarctica is typically considered from seismic tomography and geodetics to be ancient and generally stable,” according to Goodge, who studies continental tectonics with the nonprofit Planetary Science Institute. “[But] something else is going on at depth.” Continental divides Goodge speculates that this seemingly “coherent pull-apart system,” as presented in the new study, might help explain a variety of mysterious heat and water flows beneath this ice sheet’s surface, like that enormous subglacial lake identified in 2016 or some of the hundreds more like it.
The study’s authors, led by geophysicist Egidio Armadillo at the University of Genoa in Italy, agreed: “Because these basins underlie about half of the East Antarctic Ice Sheet, they are likely to heavily influence both ice-flow and landscape evolution,” the researchers wrote in their study, also published Thursday in Nature Geoscience. Armadillo’s team, coordinating across Europe and the U.K., developed their new understanding of Antarctica’s hidden bedrock via an exhaustive set of sensory data. Gravitational and magnetic anomalies were mapped via low-altitude airborne surveys. Ground surface features were mapped with seismic tools, using sound waves that vibrate through the ice and ping back information about subglacial landscapes in 3D. The grey, magenta, and cyan lines represent the apparent new fault lines discovered. Credit: Nature Geoscience All of this data—the fruits of “multi-national efforts to image within and below the ice sheet,” as Goodge put it—had already revealed that regions of the continent were “undergoing more rapid movement and ice-mass loss than previously recognized.” Armadillo’s team merely helped to explain why.
The mechanism Armadillo and his colleagues proposed for the formation of these fan-shaped basins is called “distributed rotational extension.” It involves points called Euler poles around which tectonic plates pivot or rotate rather than smash into each other or pull apart. The result is a bit like decks of cards being spread out on a table, thinning out the stack of Earth’s crust as it moves. An icy situation Goodge took pains to spell out the basins’ implications for melting Antarctic ice due to climate change and the risk of rising global sea levels.
The mere existence of these basins, he wrote, “could introduce widespread, systemic instability to the East Antarctic Ice Sheet” via thinner layers of Earth’s crust and more heat flow from below. On top of that, a series of fault-line “troughs” documented between the basins appear “tailor-made to promote outward flow of ice streams from the interior” into the world’s oceans, he said. That said, the team’s findings are unlikely to end this debate. As Goodge noted, Antarctica is “the last continental frontier of scientific exploration.” It’s still a very mysterious place, one that’s challenging to study given its inhospitable temperatures and extreme geography. Its “cryptic subglacial geology” might stay that way for a while. #Scientists #ContinentSized #Geological #Structure #Hiding #Beneath #AntarcticaAntarctica,Geology,mapping,Plate tectonics Scientists Found a Continent-Sized Geological Structure Hiding Beneath Antarctica
The East Antarctic Ice Sheet is almost unfathomably huge. Covering about 75% of the entire frigid continent (nearly everything on its side of the Transantarctic Mountains), the sheet covers about 3.9 million square miles (10.2 million square kilometers) and extends down 1.4 miles (2.2 km), on average, before coming into contact with Earth’s surface. At its deepest, the ice plunges down over 3 miles (4.9 km). For decades, scientists assumed that this literally continent-sized block of ice rested on an expansive and stable chunk of Earth’s crust known as a craton. A team of researchers has now complicated that picture—mapping a vast, interconnected geological structure that fans out from a troubling “tectonic deformation.” Beneath this ice sheet, thinner and more geologically recent slices of crusty lithosphere fan out into hidden valleys called “pull-apart basins.” These basins—30 elongated wedge-shaped valleys in total—constitute an entirely new, continental-scale geological region underneath Antarctica, in fact, one which the researchers have named the East Antarctic Fan-Shaped Basin Province (EAFBP). But it’s how they likely formed that has now caught researchers’ attention.
To put it bluntly, it turns out that about 90% of the planet’s fresh water ice may not be on solid ground. Geologist John Goodge called the team’s findings “provocative” in an independent commentary on the new study, published Thursday in the journal Nature Geoscience.
“East Antarctica is typically considered from seismic tomography and geodetics to be ancient and generally stable,” according to Goodge, who studies continental tectonics with the nonprofit Planetary Science Institute. “[But] something else is going on at depth.” Continental divides Goodge speculates that this seemingly “coherent pull-apart system,” as presented in the new study, might help explain a variety of mysterious heat and water flows beneath this ice sheet’s surface, like that enormous subglacial lake identified in 2016 or some of the hundreds more like it.
The study’s authors, led by geophysicist Egidio Armadillo at the University of Genoa in Italy, agreed: “Because these basins underlie about half of the East Antarctic Ice Sheet, they are likely to heavily influence both ice-flow and landscape evolution,” the researchers wrote in their study, also published Thursday in Nature Geoscience. Armadillo’s team, coordinating across Europe and the U.K., developed their new understanding of Antarctica’s hidden bedrock via an exhaustive set of sensory data. Gravitational and magnetic anomalies were mapped via low-altitude airborne surveys. Ground surface features were mapped with seismic tools, using sound waves that vibrate through the ice and ping back information about subglacial landscapes in 3D. The grey, magenta, and cyan lines represent the apparent new fault lines discovered. Credit: Nature Geoscience All of this data—the fruits of “multi-national efforts to image within and below the ice sheet,” as Goodge put it—had already revealed that regions of the continent were “undergoing more rapid movement and ice-mass loss than previously recognized.” Armadillo’s team merely helped to explain why.
The mechanism Armadillo and his colleagues proposed for the formation of these fan-shaped basins is called “distributed rotational extension.” It involves points called Euler poles around which tectonic plates pivot or rotate rather than smash into each other or pull apart. The result is a bit like decks of cards being spread out on a table, thinning out the stack of Earth’s crust as it moves. An icy situation Goodge took pains to spell out the basins’ implications for melting Antarctic ice due to climate change and the risk of rising global sea levels.
The mere existence of these basins, he wrote, “could introduce widespread, systemic instability to the East Antarctic Ice Sheet” via thinner layers of Earth’s crust and more heat flow from below. On top of that, a series of fault-line “troughs” documented between the basins appear “tailor-made to promote outward flow of ice streams from the interior” into the world’s oceans, he said. That said, the team’s findings are unlikely to end this debate. As Goodge noted, Antarctica is “the last continental frontier of scientific exploration.” It’s still a very mysterious place, one that’s challenging to study given its inhospitable temperatures and extreme geography. Its “cryptic subglacial geology” might stay that way for a while. #Scientists #ContinentSized #Geological #Structure #Hiding #Beneath #AntarcticaAntarctica,Geology,mapping,Plate tectonics](https://gizmodo.com/app/uploads/2026/06/East-Antarctic-Fan-shaped-Basin-Province.jpeg)
Post Comment