Google hacked account

Re:Google hacked account by yandie on Tuesday June 30, 2015 @08:25AM (#9804667)

> So far not a problem, but the email you get back after sending the password reset request contains a link to a page that allows you to cancel the request (not sure the genius who had this idea)

Did you set the recovery email the same as the main email? Cause I only get password reset to the recovery email.

If you used the same address for recovery email, then it defeats the whole purpose

[ Parent | on HN ]

Re:Google hacked account by hmoghnie on Tuesday June 30, 2015 @08:38AM (#9804725)

no i set another email. but still both emails will get the link.

[ Parent | on HN ]

Re:Google hacked account by DannyBee on Tuesday June 30, 2015 @10:28AM (#9805434)

This is not correct. Or at least, it should not be AFAIK.

I actually just tried it on an account I own, and it does not send the email to both addresses, only to the recovery email address.

If that is really happening to you, that sounds like a bug to me.

[ Parent | on HN ]

Re:Google hacked account by giarc on Tuesday June 30, 2015 @09:46AM (#9805127)

Is the person that hacked the account just sitting there waiting for emails to come in and hopefully can click the "Cancel Request" before you can reset the password?

[ Parent | on HN ]

Re:Google hacked account by mark-r on Tuesday June 30, 2015 @09:53AM (#9805178)

If you make a habit of hacking Gmail accounts, it's probably not hard to make a bot that does it for you.

[ Parent | on HN ]