Google's Family link can be abused to lock down compromised accounts(techwolf12.nl)

Google's Family link can be abused to lock down compromised accounts

https://techwolf12.nl/blog/google-family-link-exploit/

3 コメント

qguv2 か月前

This is insane. I was reading up on the "advanced protection program", cited as the only mitigation currently available to prevent this exploit.

But it's got some enormous downsides! The only apps you're allowed to install are signed ones from the Play store; you have to use a passkey for all things Google; and that Chrome is the only supported browser for logging in.

Google, fix this attack vector!

qguv2 か月前

Also, is there a CVE assigned to this exploit already?

techwolf122 か月前

As far as I know, not yet.