News for hackers. Stuff that matters.

A comment on LivingSocial Hacked – 50 Million Customers Affected. Parent comment

Re:LivingSocial Hacked – 50 Million Customers Affected by umsm on Friday April 26, 2013 @05:22PM (#5615604)
Upon a password reset submit, check if the hash(email_submit) exists, if so, email the password reset instructions to the email_submit address :)
[ Parent | on HN ]
Re:LivingSocial Hacked – 50 Million Customers Affected by rozap on Friday April 26, 2013 @05:53PM (#5615715)
Still, notifications would be toast.

Thought most email notifications are annoying, they can be useful (or crucial).

[ Parent | on HN ]
Re:LivingSocial Hacked – 50 Million Customers Affected by umsm on Friday April 26, 2013 @08:14PM (#5616245)
If you don't need email notifications, then it's not a problem.

One nice feature from gmail/yahoo/outlook/etc.: temporary email addresses that forward to your email. This would solve the problem.

Or, maybe alternative notification methods are preferred? If they wanted, a user can input an email address with a plus (if they're using gmail) and then receive notifications only on that. If the user wanted, then they could block all incoming messages that match that generated email.

[ Parent | on HN ]