Hacker News new | ask | show | jobs
by paaradise 81 days ago
> that meant each victim received three emails from us in under a minute:

> Verify your email address > Welcome to Suga > Reset your password > Three emails they never asked for, from a product they may never have heard of. We were just one of potentially hundreds of sites being hit at the same time.

@homelessdino

Why would you send welcome and reset to some victim that DID NOT verify?

1 comments

This is being addressed in the article. The service no longer does this, and he apologizes.