Skype Bug Lets Users Hijack Accounts

Posted by fafssaf on Wednesday July 20, 2011 @07:04AM
from the blogs.forbes.com dept.

http://blogs.forbes.com/andygreenberg/2011/07/15/simple-skype-bug-lets-hackers-hijack-contacts-accounts/

( 3 comments | 18 points | on HN )

Re:Skype Bug Lets Users Hijack Accounts by cipherpunk on Wednesday July 20, 2011 @07:49AM (#2785076)

A remote exploit in the Skype application that allows account theft is `minor', because, ``as you can imagine, someone who you deal with frequently is probably unlikely to take advantage of this bug anyways.''

Give me a moment to collect my jaw from the floor.

[ Parent | on HN ]

Re:Skype Bug Lets Users Hijack Accounts by shareme on Wednesday July 20, 2011 @10:42AM (#2785743)

I take it MS must have bought a Forbes ad?

[ Parent | on HN ]

Re:Skype Bug Lets Users Hijack Accounts by kevingadd on Wednesday July 20, 2011 @08:24AM (#2785149)

My favorite part of this is that for some reason, the HTML document they're using to display (unsanitized) user details in the Skype application has a cookie set that contains the logged in user's login token. Why is that even necessary to display another user's profile?

[ Parent | on HN ]