Chocolate Factory fixes issue, pays only $5K - A researcher has exposed a flaw in Google's authentication systems, opening it to a brute-force attack that left users' mobile numbers up for grabs.