News for hackers. Stuff that matters.

A comment on Is Your Site Leaking Password Reset Links?. Parent comment

Re:Is Your Site Leaking Password Reset Links? by fredsted on Monday October 24, 2016 @01:09PM (#12780693)
They would also have access to everything else, including the entered password.
[ Parent | on HN ]
Re:Is Your Site Leaking Password Reset Links? by morgante on Monday October 24, 2016 @01:17PM (#12780771)
Right. The scenario I'm considering is not a hostile attacker but simple an overzealous analytics script which also tracked hash strings. Heck, since some sites used to do AJAX navigation that way it wouldn't surprise me if some analytics services were configured to track hash strings.
[ Parent | on HN ]