Wow. This is a very serious security flaw. You should never assume that username... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

rbinv on Oct 8, 2014 | parent | context | favorite | on: Wanna know what product your competitor is working...

Wow. This is a very serious security flaw. You should never assume that usernames (especially email addresses) are unknown to attackers.

ZoFreX on Oct 8, 2014 [–]

It doesn't even require a valid email address. It's an obvious side-effect of Slack's completely weird account system.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact