carnal0wnage.attackresearch.com
Abusing Password Resets
Dave Ferguson has beaten up on forgotten/reset password functionality for some time and recently participated in an OWASP podcast where he d...