3 ms·
Could anyone shed some light on the password reset email “hack”? I don’t really understand the attack sequence if the attacker doesn’t have access to your inbox
by fiatpandas 11mo ago
Could anyone shed some light on the password reset email “hack”? I don’t really understand the attack sequence if the attacker doesn’t have access to your inbox. Even if you clicked them they don’t get access. My conclusion is trolling / annoyance.
The same thing happens to my Instagram account, which is an old 3-letter username that is desirable. I get hundreds of reset emails per month, all generated by the real service with legit outbound links.
- willsmith72 11mo agohow much are these services wasting sending out these emails? surely some rate limiting would be sensible