News for hackers. Stuff that matters.
Re:Bruteforcing the phone number of any Google user by vladvasiliu on Monday June 09, 2025 @02:33PM (#44227636)
Even companies which not only should know better, but are actually paid to handle things like this get it hilariously wrong.

The company I work for is a client of a big-ass CDN you've heard of (not the one whose ceo hangs around these parts). Yet, they somehow think it's fine to notify me of "new connections from an unusual IP" when I connect from the same /64 block of ipv6.

Re:Bruteforcing the phone number of any Google user by selcuka on Tuesday June 10, 2025 @01:25AM (#44232854)
It's easier to reuse existing code and simply bump the number of digits required to store the IP address.