Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Having access to a logged in account is definitely not sufficient evidence for a support team (at Google or anywhere else) to allow for a password reset on that account.

If it was, then someone forgetting to log out on a machine they didn't own could be a much more serious problem than it is. Rather than just temporary access to the account that the true owner has the ability to revoke, it could result in a completely stolen account.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: