Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

even Google fails this.

register a Gmail address and type in the wrong alternative email.

done. no confirmation required. someone with the mistyped email now have how to reset your password and take your account.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: