Hacker News new | ask | show | jobs
by felisml 3281 days ago
If you're allowing emails as a credential reset mechanism, you've already got that problem.