On: Why I Hate Your Website

[roam]

"Also, have an option for password recovery that doesn't require the registered email address. I have a couple of dead accounts because the email address I used to register is no longer active and I can't recall the password. Yet, the reminder is sent to that address"

Err... how exactly would that work? Just because you know the username and/or email address you should be able to reset the password?

Does anybody here have an idea that could work?

Edit: to clarify: I'm not a huge fan of the "Your question/Your answer" approach either.

[twoz → roam]

I'll take a stab at this.

Register: Username, Password, Hacker News Profile URL.

Click "forgot password" link.

Message: Modify your HN profile to include the phrase "RandomTextPleaseLetMeIn".

Click on "Verify me from HN".

The system lets you in. Now change your password.

Edit:

Instead of HN profile URL, you could also use Delicious ala 'save the following link with this tag "RandomFunk" to your Delicious profile'.

The goal is to prove to a website that has read-access something to which you have write-access.

This something is shared between you and the website before hand (at registration).

[falsestprophet → twoz]

Thats called OpenID

[twoz → falsestprophet]

I don't quite understand.

You have an OpenID. You've forgotten your password. How do you get back into your account without requesting an e-mail to reset it?

[moe → twoz]

RuntimeError: maximum recursion depth exceeded