News for hackers. Stuff that matters.
Re:But why can't I send people their passwords? by cookingrobot on Wednesday June 25, 2014 @10:50AM (#7944253)
Gmail should make you type your password again in order to open password-reset emails sent by other services.

This would close the "I accidentally left my account logged in" hole.

Re:But why can't I send people their passwords? by xyproto on Wednesday June 25, 2014 @10:54AM (#7944285)
The "log in again to do something secure" is a rabbit hole, where suddenly you have to log in again to do anything it all. It could become a login nightmare.
Re:But why can't I send people their passwords? by bmelton on Wednesday June 25, 2014 @11:48AM (#7944683)
Only if 'something secure' is defined overbroadly. Using Amazon, as an example, I can idle my session indefinitely, and when I return, it will even allow me to do potentially secure things like browse my order history, look at my account details and such, but before I order something, or change my password, it prompts for a login, except where I've just recently logged in.

There's a balance to be had, and while admittedly, getting the details right is tedium and minutiae, it can be done, and done right.

Re:But why can't I send people their passwords? by ademarre on Wednesday June 25, 2014 @02:54PM (#7946034)
I expect people would not understand this. They would start to get confused between their Google password and that of the service they are trying to access.

Also, after users learn the new process, it opens up a new phishing attack vector for Gmail.