Hacker News new | ask | show | jobs
by notatoad 4980 days ago
Still exposed here - when you click a link, it pre-fills the login box with a users email. And I guess some of the links include auto-login tokens.
1 comments
runn1ng 4980 days ago
Oh, OK. I can see the mails too, I just didn't think it's such a security risk.
link