Get the latest tech news
Google Says Sorry After Passwords Vanish For 15 Million Windows Users
Google’s Chrome password manager makes security easier. Until a bug makes your passwords disappear, that is. Here’s what you need to know.
Although a browser-based solution serves the ease of use element, having all your eggs in one basket when things go wrong, as they did here, albeit for a relatively short time, is never a good idea. The authentication issue, also now fixed by Google, enabled bad actors to “circumvent the email verification required to create a Google Workspace account,” Krebs said, which allowed them to “impersonate a domain holder at third-party services.” This impersonation meant that such a person was then able to log in to third-party services, including a Dropbox account, according to the person who contacted Krebs initially. Anu Yamunan, the director of abuse and safety protections at Google Workspace, told Krebs that a few thousand such non-domain verified accounts had been created before the fix was applied.
Or read this on r/technology
