jtraub

4 ms·

1. 1.▲
   by jtraub 14y ago

   Password recovery form was disabled and as of now the vulnerability can not be exploited. See announcement http://community.skype.com/t5/Security-Privacy-Trust-and/Pas...
2. 2.▲
   by jtraub 14y ago

   MS is fixing the problem right now. They turned off password recovery form few minutes ago.
3. 3.▲
   by jtraub 14y ago

   I guess it was done to prevent account stealing while Microsoft works on appropriate fix
4. 4.▲
   by jtraub 14y ago

   I think they can just temporarily turn off password reset to prevent account stealing. After that they can take their time to fix the problem, test it and roll out to the public.
5. 5.▲
   by jtraub 14y ago

   Even now Skype reaction is unbelievable. They are "investigating the issue" for almost 2 hours.
6. 6.▲
   Skype vulnerability allowing hijacking of an account if you know just the email(pixus-ru.blogspot.ru)

   362 points by jtraub 14y ago|119 comments