Hacker News Reader

I hate to tell you this but there is a "login" and "password_reset" API on Google.com!

How dare they! I only log in via fax request/response. Although the cookie values have gotten longer and longer -- a pain in the butt to type from the fax reply into my web browser. Any ideas?

These or equivalent APIs have been available and unofficially documented and used by third parties for many, many years. And Tesla has been doing Pwn2Own and bug bounties for a long time.

https://bugcrowd.com/tesla :)