3 ms·
That doesn't work anymore. I wanted to get access to some old emails after I let my account lapse. Recreated the same account with same password: completely emp
by HeyLaughingBoy 7y ago
That doesn't work anymore. I wanted to get access to some old emails after I let my account lapse. Recreated the same account with same password: completely empty.
- aserafini 7y agoBut the security hole is not that you can access someone else’s email messages.. it’s that you can do ‘I forgot my password’ flow for accounts associated with an email address that was previously owned by someone else!
- ta999999171 7y agoThat's a major hole in web authentication...not Yahoo!'s mail service.
- throwaway373438 7y agoIt's both. Yahoo! used to maintain a policy against address reuse for exactly this reason.