News for hackers. Stuff that matters.
Re:Why does not Google Password Reset include the originator... by sweis on Thursday March 25, 2010 @11:44PM (#1220207)
The problem with this is that people inadvertently send password resets when they forget their account name. This happens all the time. It is a pain because the recipients freak out that someone is trying to break into their account.

If that reset message contained the IP address, people who inadvertently sent it to a stranger would complain about the privacy violation.

You might catch up some dumb attackers, but in most cases it'll be from a compromised machine or through a proxy.

Re:Why does not Google Password Reset include the originator... by hasanove on Saturday March 27, 2010 @04:20AM (#1222747)
Fair point, although it is less applicable for Google Apps account, since it is not on @gmail.com and likelihood of sending password request to a stranger is much smaller.