4 ms·
Just checked out their recover password page. Just date or birth and one security question are needed. So if you already know a person, pretty easy to hack thei
by truncate 12y ago
Just checked out their recover password page. Just date or birth and one security question are needed. So if you already know a person, pretty easy to hack their accounts.
- FatalLogic 12y agoThere's no cooldown period when you guess wrong. They say there's a 24 hour cooldown, but there isn't one. You can keep guessing all day if you solve a captcha for every three guesses you make. Captcha cracking is a cheap offshorable service, $1 for a thousand
- spacefight 12y agoAnd this is another perfect example to fill in random bits of information upon signup and keep that in your password manager along your real password. Inclusive a fake birthday.
- deleted 12y ago[deleted]
- DominikR 12y agoI always enter absolute garbage in security question fields if I'm forced to use it. (for example: "ajscnuiwnoamcoebuifbaonauwbuifwbdi")