News for hackers. Stuff that matters.

A comment on But why can't I send people their passwords?. Parent comment

Re:But why can't I send people their passwords? by Sami_Lehtinen on Wednesday June 25, 2014 @02:50PM (#7945987)
True, email shouldn't be used for password recovery nor user authentication anyway. But guess what, many sites still do it. Even if site security is otherwise flawless, password recovery using email ruins everything.
[ Parent | on HN ]

There are no comments on this comment yet.