China: 10 seconds to hijack gmail password · Global Voices
Oiwan Lam

Li Tie points out that in China hijacking a gmail account password only takes 10 seconds if the user has connected his/her account with mobile phone. Once the password recovery was sent to the mobile, the security police can get hold of the account information.