Comment by lxgr Comment by lxgr 3 months ago 0 replies Copy Link View on Hacker News That's why allowing account recovery using (exclusively) email is indeed a security problem.