4 ms·
This is similar to stealing Hotmail accounts. All you needed was information like the name of the person, the IP, a few contacts on the contact list, (maybe) ty
by hjay 13y ago
This is similar to stealing Hotmail accounts. All you needed was information like the name of the person, the IP, a few contacts on the contact list, (maybe) type a convincing message about being hacked, and voila!
Somehow Microsoft assumes knowing a small number of contacts ensures you are the owner. Close friends or even co-workers and classmates can easily get their account compromised by someone they know. Knowing any mutual friends pretty much convinces them it's your account.
- jzelinskie 13y agoI was just about to post my experiences with this. I used to play an online game where everyone used MSN/Hotmail. When things got competitive, everyone just recovered each other's accounts and impersonated each other because it was so easy. You barely had to know anything about each other to do it. I wrote to the team a few times and was finally able to speak with the team during a reddit AMA years later and they claim to have made changes, but the comments from other redditors seemed to claim otherwise. The end result is I just don't trust Microsoft to have secure accounts for anything. I'll stick to my Google account with two-factor authorization.