Update: Apple has shut down its "iForgot" password recovery page to deal with a security flaw, which is described below.
Original: Watch out, there's a security flaw that could let someone easily take over your Apple accounts, Chris Welch at The Verge reports.
If someone knows your email address and your date of birth they can reset your password. All it takes is a slight tweak of a URL on Apple's "iForgot" page.
Welch says there is a step-by-step guide floating around the Internet, though he didn't link to it to discourage people from actually doing it.
No comments:
Post a Comment