Skip to content

Comment on Booking.com ignores twofactor, lets everyone email-login without a password

Comments

You can go to youtube and login with any random email address and get the full name of the person and profile photo, assuming they've ever logged into Google. All you need is their email address.

Is this still true after the recent signin page updates? I tried it and didn't seem to get those

Ah, looks like it is tied to "has this IP ever logged in with this email" kinda thing.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.