Brutkey

Niko (Martin) :heart_ace:
@martinligabue@tsukihi.me
Niko (Martin) :heart_ace:
@martinligabue@tsukihi.me
Niko (Martin) :heart_ace:
@martinligabue@tsukihi.me
Niko (Martin) :heart_ace:
@martinligabue@tsukihi.me
Niko (Martin) :heart_ace:
@martinligabue@tsukihi.me
Niko (Martin) :heart_ace:
@martinligabue@tsukihi.me
Brian Greenberg :verified:
@brian_greenberg@infosec.exchange

This Gmail hack is unsettling not because it’s flashy, but because it’s bureaucratic. Attackers aren’t breaking encryption or outsmarting algorithms. They’re filling out forms. By changing an account’s age and abusing Google’s Family Link feature, they can quietly reclassify an adult user as a β€œchild” and assume parental control. At that point, the rightful owner isn’t hacked so much as administratively erased.

The clever part is that everything happens inside legitimate features. Passwords are changed. Two-factor settings are altered. Recovery options are overwritten. And when the user tries to get back in, Google’s automated systems see a supervised child account and do exactly what they were designed to do: say no.

Google says it’s looking into the issue, which suggests this wasn’t how the system was supposed to work. But it’s a reminder of an old lesson. Security failures often happen when protective mechanisms are combined in ways no one quite imagined. The tools aren’t broken. The assumptions are.

There’s no dramatic fix here, only mildly annoying advice that suddenly feels urgent. Review recovery settings. Lock down account changes. Use passkeys. Because once an attacker controls the recovery layer, proving you’re you can become surprisingly difficult.

TL;DR
🧠🧠 Family safety tools are being weaponized
⚑⚑ Account recovery can be shut down entirely
πŸŽ“πŸŽ“ Legitimate features enable the lockout
πŸ”πŸ” Prevention matters more than appeals

https://www.forbes.com/sites/daveywinder/2025/12/07/google-looking-into-gmail-hack-locking-users-out-with-no-recovery

#Cybersecurity #Gmail #IdentitySecurity #AccountRecovery #DigitalRisk #security #privacy #cloud #infosec

Niko (Martin) :heart_ace:
@martinligabue@tsukihi.me
Niko (Martin) :heart_ace:
@martinligabue@tsukihi.me
Niko (Martin) :heart_ace:
@martinligabue@tsukihi.me
Suzanne β€˜bionic’ Veerman
@smveerman@zug.network

Using public transport for me means you are part of a collective of people that share their mode of transport. For me that means all people on board the vehicle have a shared responsibility that we make it to the location we want to be in good order.

Asking someone to turn the noise down. Giving a tissue to someone who ate an oliebol with powdered sugar and has dirty hands. Sharing a sip of water with someone who was suffering from the heat. Asking for help when someone is not doing well. Welcoming someone back in the train who said he didn't take the train for 10 years and was wondering if he took the right one.

These are all things I have done in public transport this year and to make it a welcoming place for everyone. Together we can make public transport happy transport
😊😊

Niko (Martin) :heart_ace:
@martinligabue@tsukihi.me
Niko (Martin) :heart_ace:
@martinligabue@tsukihi.me