Quote (KevlarKondom @ May 26 2023 02:10pm)
Regardless of if you use OG username or an email to login, It's way to simple and easy to have perfect account protection. (Assuming you don't get a virus or phished of course)
The scammers can just hack accounts nowadays with almost no starting info. they hacked mod ash's wifes acc just to show the jmods that their security is shit.
your account can be recovered with such minimal info that its pathetic.
Say you have your username as you login, they search your username on databases with emails and passwords that have been compromised through other sites and sources. they then use all the info provided to recover your account, and often works.
Sadly until they drastically increase quality of the recovery process, accounts are pretty well fucked.
whats even worse is that your auth is useless since when you recover an account, it disables the auth automatically. your only hope is that you have the 7 day pin deactivation set and get your account back before it is removed.