Myspace lets you hijack any account just by knowing the person’s birthday

Re:Myspace lets you hijack any account just by knowing the p... by stevekemp on Tuesday July 18, 2017 @05:16AM (#14795247)

I've had a few recent discussions with various people at post-offices, here in Finland.

The counter staff repeatedly complain that parcels are addressed to "Steve" not "Steven" (which is the name on my official ID.)

It's a very weird situation to be in, as somebody from the UK where such things just don't matter.

[ Parent | on HN ]

Re:Myspace lets you hijack any account just by knowing the p... by cm2187 on Tuesday July 18, 2017 @05:43AM (#14795343)

I don't see how it would even matter. What if you host a friend for a few weeks at your place. Isn't that friend allowed to receive mail?

[ Parent | on HN ]

Re:Myspace lets you hijack any account just by knowing the p... by lmm on Tuesday July 18, 2017 @05:49AM (#14795362)

In many countries there are super-serious laws about mail being delivered to the addressed recipient and not opened or interfered with by anyone else, from the days when it was the only form of official communication and used for matters of life and death.

[ Parent | on HN ]

Re:Myspace lets you hijack any account just by knowing the p... by Sharlin on Tuesday July 18, 2017 @06:31AM (#14795512)

It's not about matching the address to the legal resident, but matching the recipient name to the name in your official ID when you go to a post office to pick up a parcel. That is, authentication. Letters and small enough parcels are delivered directly to your address; with those the recipient name doesn't really matter except for possibly disambiguating an incomplete/incorrect address at the mail sorting center.

[ Parent | on HN ]