A vulnerability allowed researchers to brute-force any Google account's recovery phone number simply by knowing a their ...