Global Feed Post Login
Replying to Avatar bumi

The password reset email could be requested with an email and attackers use leaked emails from lists recorded in for example haveibeenpwned.

Sadly in the Alby case the password reset email could also be requested with the lightning address which is likely what happened to you. Some attacker got the lightning address from nostr for example to do this.

We have disabled this now.

Avatar
⚑ Dee Kay βš‘πŸ‡ΈπŸ‡ͺπŸ‡¬πŸ‡§πŸ‡¨πŸ‡ΏπŸ‡§πŸ‡·πŸ‡¦πŸ‡Ή 2mo ago

The email address used for this account is only used for Alby. Not reported as leaked.

Not used as my lightning address.

Reply to this note

Please Login to reply.

Discussion

No replies yet.