Every story and comment from the Hacker News API, in a layout borrowed from 2001.
A comment on Persona Password Reset Phishing Flaw.
> 3. Clicking that link provided no further confirmation before changing my password.
Try doing that from another browser :) Persona only skips confirmation if you hit the reset link from the same browser that requested the reset.
Edit: More info at https://github.com/mozilla/browserid/issues/2499#issuecommen...
Which is really interesting, because Persona is doing the right thing, but giving the impression of not doing the right thing. Hm.
> 3. Clicking that link provided no further confirmation before changing my password.
Try doing that from another browser :) Persona only skips confirmation if you hit the reset link from the same browser that requested the reset.
Edit: More info at https://github.com/mozilla/browserid/issues/2499#issuecommen...
Which is really interesting, because Persona is doing the right thing, but giving the impression of not doing the right thing. Hm.