Sorry, we don't support your browser.  Install a modern browser

Security improvement: login and conformation e-mail address should be different#201

If an attacker manages to pass through the 2-factor authentication,
he can know what e-mail account to attack in order to be able to confirm the withdrawals.

I suppose this change is an easy one to implement.
Lots of sites do that.


a year ago
Changed the status to
6 months ago