Today there are reports of a breathtakingly bad vulnerability in Skype, that allows anyone to hijack another person’s account simply by knowing the email.
Password resets have now been disabled, fixing the problem temporarily, but it remains inexcusable.
It is basic security practice that ownership of an email address must be validated with
…continue reading Skype vulnerability exposes poor security in web application. Who will trust Skype now?
Recent Comments