“My Google account got suspended because of NewPipe”

Re:“My Google account got suspended because of NewPipe” by ArtWomb on Monday October 14, 2019 @10:13AM (#21248473)

I just discovered a mission critical bug in their 2FA flow as well. Gist of it is if you switch phones, verifying the new number, it still prompts to the old number. You cannot login to update to the new number, without the old number. It then locks you out of your account for hours.

The kicker is I am authenticated on the new phone! But cannot make changes because of the 2FA bug. So at some point, randomly, it decided to revert to an old phone number. Even though I am certain I disabled it!

I feel even submitting a detailed report, it would take quite a while to pierce the layers of bureaucracy and come into contact with a technical human that can diagnose and understand the nature of this issue ;(

[ Parent | on HN ]

Re:“My Google account got suspended because of NewPipe” by kd913 on Monday October 14, 2019 @11:19AM (#21249206)

This is on purpose, otherwise anyone can just register a new phone including an attacker.

In these contexts, you should have a recovery mechanism in place such as recovery codes or a recovery email.

[ Parent | on HN ]