Join the discussion
Write your take first — we'll ask for email only when you're ready to publish.
- Hacker News
- Why the hell does nobody talk about the crazy exploitation way? Calling the reset password endpoint, triggering a 400 but receiving an active session through that? Did they inject a compromised email?by Noujin