Exploit Allowed Easy Apple ID Password Reset




TidBITS show

Summary: The Verge broke the news that an easy method using a modified URL and an account holder’s date of birth enabled a malicious party to reset an Apple ID password. Apple quickly shut down its password-reset page, iForgot, and revised the process.<p> </p><p>Read the <a href="http://tidbits.com/article/13656">full article at TidBITS</a>, the oldest continuously published technology publication on the Internet. To get a full-text RSS feed, help support our work and <a href="http://tidbits.com/member_benefits.html">become a TidBITS member</a>! Members also enjoy an ad-free version of our Web site, email delivery of individual articles, the ability to make long comments with live links, and discounts on Take Control orders and other Apple-related products.</p>