[lightedman]

"nobody will be stupid enough to hand-code an account recovery where you get to type any email address."

I can think of several pre-2000s chat rooms that did EXACTLY this. It is how I lost several chat accounts as a teenager.

[abeyer]

Not a full password reset, but I've seen this on some sites even recently for 2FA... more than one poorly implemented SMS 2FA prompt has asked me what number I want to receive a confirmation code at to prove it's me. :facepalm: