Legal Robot · Report #250082
Enhancement: email confirmation for 2FA recovery
Validstatus
mediumseverity
10upvotes
31 Jul 2017disclosed
Summary
While searching for other issues, a security researcher proposed an enhancement to our 2FA account recovery: require email verification for 2FA recovery use. We implemented this change and thank @goodhackonly for an excellent suggestion that makes Legal Robot even more secure.
How it was found
The write-up for this report has not been downloaded yet, or the program disclosed it without one. Read it on HackerOne.