Show HN: Apple Security Issue Allows Logins With Old Emails2 points·by redegg·14 lat temu·0 commentsI switched my Apple ID email to another address today, but I accidentally used my old email address and saw I was able to log in.Why do they do this? Isn't it a potential security issue?I use a email provider that releases emails back into the pool once they expire. Anyone else picking up my email could reset my password.Update: Reset email came to my old email, clicked the link and it showed "Enter a new password for <new_email_here> below". I'm guessing it works.Update 2: Disclosed issue with [email protected].0 commentsPost comment—
Why do they do this? Isn't it a potential security issue?
I use a email provider that releases emails back into the pool once they expire. Anyone else picking up my email could reset my password.
Update: Reset email came to my old email, clicked the link and it showed "Enter a new password for <new_email_here> below". I'm guessing it works.
Update 2: Disclosed issue with [email protected].