Hacker News Reader

I think he reached out to the support team instead of the security team. Pretty stupid of the support team to not take security bug reports seriously.

View on HN

I'm not very surprised. If he told me about it, I would find it quite hard to believe that Google's programmers made such an error too.

It's always the assumptions that get you.

This. A thousand times this. Especially when investigating security issues, assume everything could be vulnerable or broken until proven otherwise.

Even I was shocked when I 1st show this bug..

Ya because at that time I wasn't able to find any way to get in direct contact with them via phone call..

Reply on news.ycombinator.com