<?xml version="1.0" encoding="utf-8"?>
<feed xml:lang="en-us" xmlns="http://www.w3.org/2005/Atom"><title>Simon Willison's Weblog: webmail</title><link href="http://simonwillison.net/" rel="alternate"/><link href="http://simonwillison.net/tags/webmail.atom" rel="self"/><id>http://simonwillison.net/</id><updated>2008-09-22T16:21:41+00:00</updated><author><name>Simon Willison</name></author><entry><title>Quoting Ed Felten</title><link href="https://simonwillison.net/2008/Sep/22/yahoo/#atom-tag" rel="alternate"/><published>2008-09-22T16:21:41+00:00</published><updated>2008-09-22T16:21:41+00:00</updated><id>https://simonwillison.net/2008/Sep/22/yahoo/#atom-tag</id><summary type="html">
    &lt;blockquote cite="http://www.freedom-to-tinker.com/blog/ed-felten/2008/09/22/how-yahoo-could-have-protected-palins-email"&gt;&lt;p&gt;Yahoo could also have followed Gmail's lead, and disabled the security-question mechanism unless no logged-in user had accessed the account for five days. This clever trick prevents password "recovery" when there is evidence that somebody who knows the password is actively using the account.&lt;/p&gt;&lt;/blockquote&gt;
&lt;p class="cite"&gt;&amp;mdash; &lt;a href="http://www.freedom-to-tinker.com/blog/ed-felten/2008/09/22/how-yahoo-could-have-protected-palins-email"&gt;Ed Felten&lt;/a&gt;&lt;/p&gt;

    &lt;p&gt;Tags: &lt;a href="https://simonwillison.net/tags/forgottenpasswords"&gt;forgottenpasswords&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/gmail"&gt;gmail&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/security"&gt;security&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/webmail"&gt;webmail&lt;/a&gt;, &lt;a href="https://simonwillison.net/tags/yahoo"&gt;yahoo&lt;/a&gt;&lt;/p&gt;



</summary><category term="forgottenpasswords"/><category term="gmail"/><category term="security"/><category term="webmail"/><category term="yahoo"/></entry></feed>