Isn't the second question equivalent to what we have now? If an attacker knows m... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		megaman821 on April 9, 2013 \| parent \| context \| favorite \| on: New Persona Beta: Millions of Users Ready to Log I... Isn't the second question equivalent to what we have now? If an attacker knows my Yahoo password, can he potentially reset all the passwords of sites I registered with using my Yahoo email address and login to them.

ozten on April 9, 2013 [–]

Great point. Previously discussed on HN, but this story paints the picture of the world we're already living in http://www.wired.com/gadgetlab/2012/08/apple-amazon-mat-hona...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact