My jimmies were somewhat rustled when I didn't get prompted for my current password when modifying it.

  • 5
    Holy hell, you're right! That's a pretty rooky mistake from them... I suppose they are hoping that random account GUID in the URL will prevent willy-nilly 3rd party password resets, but still... That's pretty bad.
    – AviD Mod
    Feb 25, 2016 at 8:18
  • 1
    Filed as a featreq in 2014: meta.stackexchange.com/questions/232256/… Mar 2, 2016 at 8:45


You must log in to answer this question.

Browse other questions tagged .