as the title states, I can change passwords without entering my old password. of course users should log out when done but that allows someone to take an account they find lying open on a pc....
as the title states, I can change passwords without entering my old password. of course users should log out when done but that allows someone to take an account they find lying open on a pc....
InducedAutist wrote
+1 on this.
I'm also tempted to ask about 2FA, though I'm not sure how one would do this without compromising on hard anonymity... The option would be nice, though.