On Phone Numbers and Identity

Re:On Phone Numbers and Identity by raverbashing on Wednesday September 28, 2016 @02:36PM (#12600113)

But if the employee had long passwords, was his fb account compromised through the use of password reset through SMS then?

[ Parent | on HN ]

Re:On Phone Numbers and Identity by PwdRsch on Wednesday September 28, 2016 @07:07PM (#12602073)

Yes. They didn't need to know his strong password to log on, they just needed access to his mobile phone SMS in order to complete the account recovery process and change his account password to a value they chose.

[ Parent | on HN ]