When someone resets a password, a code is typically sent to an account holder’s email, which is then input into a website (or app) for verification purposes. Moreover, protections should prevent that code from being brute-forced by a hacker, but this isn’t always the case. Laxman Muthiyah, a security researcher, recently reported that he could