News for hackers. Stuff that matters.

A comment on But why can't I send people their passwords?. Parent comment

Re:But why can't I send people their passwords? by asuffield on Wednesday June 25, 2014 @09:18AM (#7943668)
The key difference is that capturing a plaintext password means the user and attacker both share a password without the user realising, while capturing a reset link means that one of them will win and the other will observe their password reset has failed.
[ Parent | on HN ]

There are no comments on this comment yet.