Slashdot Mirror
Skype Disables Password Resets After Huge Security Hole Discovered
another random user writes with news of a vulnerability in the Skype password reset tool "All you need to do is register a new account using that email address, and even though that address is already used (and the registration process does tell you this) you can still complete the new account process and then sign in using that account Info (original post in Russian)"
concealment adds a link to another article with an update that Skype disabled the password reset page as a temporary fix.
It already has been. Anonymous Cowards are everywhere! We are Legion!
I'd ask for a refund!
Your to fussy. I could care less.
Guys, loose this off-topic subthread already.
If I understand this "security hole" correctly.. and they have already popped the data to let you know the email is taken.. isn't it pretty much close to nobrainer not to go ahead with that insert query? I may be a simple caveman.. but cmon.. even in my worst spaghetti code this is solidly on the durr side of Hurr-Durrrr
Well they have a QA system, but they forgot the password, and right now the password reset functionality is disabled.
I'm sure they'll get back to it soon though!
People in cars cause accidents....accidents in cars cause people
I could have been easily hit by that one...
Think you weren't? I've been dialing your contacts all morning while dressed appropriately for chatroulette. Your grandma did not look happy, but your wife stayed connected for 45 minutes...
This post comes with a double-your-money-back guarantee!
Any offense taken to this post is at your sole discretion.