Hacker News new | ask | show | jobs
by polymatter 4868 days ago
or just the password to your email. Then they can use the 'forgot password' to get a new one.

Some sites require you to state a username, but if you're anything like me, you've used less than half a dozen. Even my bank is happy to assume that access to my email is sufficient to prove identity.

1 comments

For internet banking? Please tell me which bank it is so that I can avoid it.
not for internet banking. but my bank is happy to take intructions by email (for the business account anyway). I also receive my bank statements by email - complete with name, address, account no etc. all in a plaintext pdf.

But it seems most people - even supposed techies - are happy to equate email verification as identity verification. I'd be surprised if you couldn't get into most accounts just with an email address you can send from.

I, for once, would also like to receive this information - purely for educational purpose.