- The authorisation of a Google Photos account on Google carries a random state which the callback compares with the session which started it, and follows only that one. Before, the state was the id of the account; the callback stored nothing on its own, it only filled the token field of the open account form, so no attack was known.
All prices include VAT. The gross price will vary depending on the selected shipping country.