A Simple but Practical Account Recovery Plan / hacker news