Hacker News Reader

Why can’t these emails just come out and say it: “your account was affected”. It’s always implicit.

Also, why rely on users to change their passwords? Is there a security log I can check?

Should they change your password for you? How do they communicate it securely then? Over unencrypted email, whose password may or may not be the same of your just-compromised docker account?

They could invalidate the passwords making you use a 'forgot password' link to enter a new password instead of keeping the old compromised ones :)

Reply on news.ycombinator.com