HNHacker News
TopNewBestAskShowJobs

jtraub

369 karma · joined April 5, 2011

submissionscomments
jtraub··on Skype vulnerability allowing hijacking of an account if you know just the email
Password recovery form was disabled and as of now the vulnerability can not be exploited. See announcement http://community.skype.com/t5/Security-Privacy-Trust-and/Pas...
jtraub··on Skype vulnerability allowing hijacking of an account if you know just the email
MS is fixing the problem right now. They turned off password recovery form few minutes ago.
jtraub··on Skype vulnerability allowing hijacking of an account if you know just the email
I guess it was done to prevent account stealing while Microsoft works on appropriate fix
jtraub··on Skype vulnerability allowing hijacking of an account if you know just the email
I think they can just temporarily turn off password reset to prevent account stealing. After that they can take their time to fix the problem, test it and roll out to the public.
jtraub··on Skype vulnerability allowing hijacking of an account if you know just the email
Even now Skype reaction is unbelievable. They are "investigating the issue" for almost 2 hours.