In-reply-to » Hmm noting that yarnd password change function is insecure by design and should be fixed 🤔

@prologic@twtxt.net Ah, ok. But you actually have to be logged in. It doesn’t just assume it. At least it tried it in the web UI. It would be nice to confirm the password by retyping it into a second field, so typos are caught.

⤋ Read More