3 ms·
Faking EDR's and GDPR is the newest way to take over anyone's account, for many platforms. just the effort companies made to support the requests allow for she
by Jerrrry 5y ago
Faking EDR's and GDPR is the newest way to take over anyone's account, for many platforms.
just the effort companies made to support the requests allow for shenanigans.
if you cant take over the account - you request it be deleted, then remake the account with the username/email desired.
- phendrenad2 5y agoInteresting. And since you can't even store the email address, you can't detect that someone is recreating a deleted account. Hashes to the rescue though. You can just return a cryptic "email/account name not accepted" message.
- Jerrrry 5y agoIs storing a hash not also invasive? I don't store your IP or SSN. I store the Md5 hash of it. If the bit-space is easily enumerable, it is just as bad... but is it?