Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> This is illegal, CFAA of 1996.

I'm not sure it is. The system you are accessing is not the user's, it's the company's. The company let you in with your own email address.

Discord was horrible about this. They kept sending automated emails about someone else's account, because the user signed up with my email address. I told them it wasn't mine and they should make the user fix their email address. Instead, they asked me to confirm I wanted to delete the account. I refused, telling them it wasn't mine. This all happened in Spanish, because the user spoke Spanish, even though my inquiry was originally in English.

So clearly, not all companies care all that much who you are and will freely let you take over other people's accounts.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: