A security researcher has discovered a bug that could be exploited to reveal the private recovery phone number of almost any ...