15Privacy & surveillanceBelow the top 20
Hints that reconstruct the password because the model is good at you
CapabilityDomain knowledgeImpact domainCap-adjacent
Statement (NASA form)
Given that reset flows already use ‘personal’ questions, there is a possibility of the account opened from biography resulting in you as the attack surface.
Likelihood
3Probable
Consequence
4Critical
Urgency
3Priority
Personal slice · privacy. Experimental household card. Not a certified finding.
Composite 15 = 3×4 + 3