Hacker News Reader

Another very annoying one is when doing forgot password changes the password and emails you a copy, so some funny guy can just go and keep doing forgot password and it force changes your password.

View on HN

I know a site that does this, except they run their own SMTP server that sometimes blocks up, so the emails never arrive.

This was not meant to be used that way: https://www.troyhunt.com/building-password-purgatory-with-cl...

w

Reply on news.ycombinator.com