Hacker News new | ask | show | jobs
by abeyer 19 days ago
Not a full password reset, but I've seen this on some sites even recently for 2FA... more than one poorly implemented SMS 2FA prompt has asked me what number I want to receive a confirmation code at to prove it's me. :facepalm: