Steam allowed password reset without token from email, producing mass hacking | Hacker News Reader