Terrible Flaw of MKPC (that will probably lead to doxxing)

So there is a terrible flaw on MKPC. If you log out and press forgot password and click on i have my email on my account, it will ask you for your username, and when you put in your person, it will just give you their email.

This happened to me today and tendo now knows my email (although it is a fake) and he tried email bombing me (so know I know HIS email).

I am reporting this because I really don't want anyone to have to suffer from this.

I don't have email on mine (and I don't wanna)

I tried this with @Proudster's profile and it didn't give me the full email. How is this an issue if it's censored?

because when it happened to mine, it only did m**@blahblahblah.com so it was very obvious

i tried it with yours and tbf it might me my bad lol. Its still an issue

the issue it that it only shows the stuff after the '@ ', so if it's a school email it will be pretty easy to find it for example

Thanks for letting me know that! I've just removed mine because A - it's my school email, so it wouldn't even send me the thing and B - I know my password and don't think I'll ever forget it. Thank you @KeinieoMK and @Xero and the others.

I don't respond to E-Mails. On the contrary, why are you even contacting me in the 1st place?

I did not contact you? The only reason I used your email for the test was bc I had figured that you linked your email, so I used your profile to test the thing that keinieo said to see if it was true. If the contents were too revealing, I would not have posted the screenshot. Nobody can contact you with that information alone without a brute force method.

I just checked my E-Mails and I didn't get a single thing from you.

Yeah, because I didn't contact you. The point of the experiment wasn't to contact you.

True

This is sad.


For now, I have unlinked my email.