Hacker News Reader

A teaching moment for using strong passwords.

That’s missing the point. And frankly victim blaming.

Allowing all the security info to be changed moments after logging on with no way to put them back is absurd.

The reverse compromise, where the email is hacked would require exactly that though. It's not a problem with one solution. It's many problems that require a human point of contact.

It's actually a moment for 2FA.

Also the other commenter is right about victim blaming. The notification about a suspicious login should give appropriate options to safeguard one's account from a takeover.

Reply on news.ycombinator.com