Comment by lxgr Comment by lxgr 6 months ago 0 replies Copy Link View on Hacker News That's why allowing account recovery using (exclusively) email is indeed a security problem.