coates’s Twitter Archive—№ 18,692

This thing where we allow people to reset their passwords via never-secure-enough email is dumb. Not as dumb as security questions, though.