News for hackers. Stuff that matters.

A comment on Skype vulnerability allowing hijacking of an account if you know just the email.

Re:Skype vulnerability allowing hijacking of an account if y... by ivan_krechetov on Wednesday November 14, 2012 @04:27AM (#4782653)
I confirm. Just tested on Win7, Skype 6.0.0.120

The notification about the password reset token does appear in the Skype client, but no reset code is shown at first. Then I've pressed Ctrl+F5 on the home screen, skipped the Facebook thing, and here they are!

http://www.xiag.ch/share/2012-11-14_1021.png

On OSX doesn't work, though. The password token notification doesn't come.

[ Parent | on HN ]
Re:Skype vulnerability allowing hijacking of an account if y... by suchitpuri on Wednesday November 14, 2012 @05:19AM (#4782773)
also it seems the password reset link, is not working for me.
[ Parent | on HN ]
Re:Skype vulnerability allowing hijacking of an account if y... by jtraub on Wednesday November 14, 2012 @05:24AM (#4782783)
MS is fixing the problem right now. They turned off password recovery form few minutes ago.
[ Parent | on HN ]