Changing backup email address now requires password

Rob Mueller – 22 January 2006

To avoid a security hole, if you want to change your backup email address on the Options -> Account Preferences screen, you now have to enter your existing password. This stops the hole where if a user accidentally left a session open on a public computer, someone could change the backup email address and then request a lost password to be sent to that address.