News for hackers. Stuff that matters.

A comment on Is Your Site Leaking Password Reset Links?. Parent comment

Re:Is Your Site Leaking Password Reset Links? by spdustin on Monday October 24, 2016 @10:24AM (#12779025)
You and I both. Remember, however, that you and I are not a representative sample of the general population of web users.
[ Parent | on HN ]
Re:Is Your Site Leaking Password Reset Links? by andrewflnr on Monday October 24, 2016 @02:42PM (#12781571)
That would be meaningful if we were talking about some optional UX feature, but this is security. Does having a non-representative browser config mean we don't deserve security? I think not. Security has to work without JS.
[ Parent | on HN ]
Re:Is Your Site Leaking Password Reset Links? by spdustin on Monday October 24, 2016 @07:59PM (#12784001)
Why wouldn't it just <noscript> an input field to enter the token
[ Parent | on HN ]