Hacker News new | ask | show | jobs
by renewiltord 891 days ago
If they support SMS 2FA they need to be prepared for this too because it costs a lot. Yeah, so people need to ensure that reset is at least a little hard to abuse. After all, it's a bad experience for their users if they receive a shit ton of reset emails anyway.
1 comments

Can confirm that last part. I get so many Facebook reset messages, it's a bit ridiculous.