News for hackers. Stuff that matters.
Re:Librarian's Letter to Google Security by nick__m on Monday August 01, 2022 @10:12AM (#32306193)
Your concern while valid seems solvable.

They could preauthorize a random token amount on credit card with matching details, have you call the number on the back of your card to figure out that amount and then you have to input that number to authorize the access in an oath like flow.

Please tell me if you see something wrong with my procedure?

edit: I saw something wrong, I have forgotten about the vast unbanked population in the rest of the world as we don't have that problem in Canada¹

1) https://www.gfmag.com/global-data/economic-data/worlds-most-...

Re:Librarian's Letter to Google Security by wjko21 on Monday August 01, 2022 @10:19AM (#32306293)
As with every other "simple solution" to a complex problem there are a few flaws:

a) google will have to require a credit card in order to open an email

b) person opening an email account must actually have a line of credit, e.g.: many of the people mentioned in the OP will not have it

c) opens a new attack vector on google accounts, e.g.: people who secured their emails using 2FA app for example can now be attacked via a credit card process

Re:Librarian's Letter to Google Security by thayne on Monday August 01, 2022 @10:55AM (#32306829)
a and c can be solved by making it an option for 2fa instead of requiring it.
Re:Librarian's Letter to Google Security by wjko21 on Monday August 01, 2022 @11:22AM (#32307306)
but you already know what will happen next, don't you? People would stop using 2FA, then some donkey on government contract with access to nuclear weapons gets hacked, and everybody would lose their mind: "how could google be so stupid to allow people not use 2FA?!?!?!"
Re:Librarian's Letter to Google Security by thayne on Monday August 01, 2022 @08:14PM (#32313786)
I'd be asking why was someone using gmail for anything related to nuclear weapons.
Re:Librarian's Letter to Google Security by wjko21 on Tuesday August 02, 2022 @12:48PM (#32321105)
I don't know if you are being sarcastic or naive here... Why would Hillary use her own email server for critical government correspondence? I don't know! Reasons I guess. People on all levels tend do stupid stuff every once in a while
Re:Librarian's Letter to Google Security by lolinder on Monday August 01, 2022 @10:19AM (#32306287)
The disadvantaged people who the librarian talks about (selling their phone to make ends meet) may not have a credit card to charge.