Comment by lxgr Comment by lxgr 4 days ago 0 replies Copy Link View on Hacker News That's why allowing account recovery using (exclusively) email is indeed a security problem.