Hacker News new | ask | show | jobs
by octodog 875 days ago
How are attackers getting username and real names from this? Surely the password reset page doesn't reveal that information?
1 comments
MattGaiser 875 days ago
The "share" button for a board does. Share a Trello board and enter an email. It returns a full name and a username in the response and sometimes the UI.
link