News for hackers. Stuff that matters.
Re:Password Rules Are Bullshit by x1798DE on Friday March 10, 2017 @09:55AM (#13839000)
If a site offers email resets at all, how often you (legitimately) use them generally doesn't play into the security analysis. If it's easier to get access to your e-mail than to get the password to the account that can be reset by proving access to the e-mail, then your e-mail is the weakest link.
Re:Password Rules Are Bullshit by bogomipz on Friday March 10, 2017 @10:40AM (#13839377)
>"if it's easier to get access to your e-mail than to get the password to the account that can be reset by proving access to the e-mail, then your e-mail is the weakest link."

This was exactly my point yes :)