2016/08/05

This never happens

User's password is compromised and reset, user completes password update then immediately changes password back to original compromised password. https://securityreactions.tumblr.com/post/148357564132