Hundreds of people got dozens of reset password requests at the same time recently. Maybe its a bug, but its weird af. At least you need to know the user email to request it.

Source: [Hacker News](https://news.ycombinator.com/item?id=49522373)

Sponsored