Google Fixes Flaws That Could Have Allowed Hackers to Hijack User Accounts
A researcher got $12,500 from Google for reporting several vulnerabilities in the account recovery process that could have been exploited to change a user’s password.
Original author: Eduard Kovacs