[liberationtech] Problem with Google 2-step verification

[Nariman Gharib]

Hi,
If someone hacked into your account with your backup codes or somehow and
after that the attacker wants to add his mobile phone number to your
account and will remove your primary number from account, Google doesn't
send you any alert or confirmation. so after that the attacker can enable
the 2step verification with his own number and you will lost access to your
account.

https://accounts.google.com/b/0/SmsAuthSettings#devices

Thanks
Nariman
@Listentous

-- 
PGP: 084F 95C0 BD1B B15A 129C 90DB A539 6393 6999 CBB6
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.stanford.edu/pipermail/liberationtech/attachments/20140915/20df2017/attachment.html>