"nobody will be stupid enough to hand-code an account recovery where you get to type any email address."
I can think of several pre-2000s chat rooms that did EXACTLY this. It is how I lost several chat accounts as a teenager.
"nobody will be stupid enough to hand-code an account recovery where you get to type any email address."
I can think of several pre-2000s chat rooms that did EXACTLY this. It is how I lost several chat accounts as a teenager.
Not a full password reset, but I've seen this on some sites even recently for 2FA... more than one poorly implemented SMS 2FA prompt has asked me what number I want to receive a confirmation code at to prove it's me. :facepalm: