sahara_mafia

It looks like Skype has another big hole in their security. According to reports, a security hole makes Skype accounts vulnerable to hijacking. The security hole allows unauthorized users with knowledge of your Skype-connected email address to change the password on your Skype account, thus gaining control of it.

___________
Source: THN

__________________

Trusteft

I am a bit confused. If you have to use the victim's email address, doesn't this mean you have to know that password too? Since if you don't you don't get the reset password and thus control of the account in question?

__________________
Formerly BlueMak

The people who are regarded as moral luminaries are those who forego ordinary pleasures themselves and find compensation in interfering with the pleasures of others(Bertrand Russell)"You go into Afghanistan, you got guys who slap women around for five years because they didn't wear a veil,You know, guys like that ain't got no manhood left anyway. So it's a hell of a lot of fun to shoot them." - Lt. Gen. James N. Mattis
This is slavery, not to speak one's thought. [Euripides-The Phoenician Women (c.411-409 B.C.)] http://www.macedonia.info/FALLACIESANDFACTS.htm Sic semper tyrannis.

LeanWolf

just glancing at the actual article:

"No access to the victim's inbox is required one just simply needs to know the address"

Trusteft

Please read the article and let me know if you still think that makes sense.

__________________
Formerly BlueMak

The people who are regarded as moral luminaries are those who forego ordinary pleasures themselves and find compensation in interfering with the pleasures of others(Bertrand Russell)"You go into Afghanistan, you got guys who slap women around for five years because they didn't wear a veil,You know, guys like that ain't got no manhood left anyway. So it's a hell of a lot of fun to shoot them." - Lt. Gen. James N. Mattis
This is slavery, not to speak one's thought. [Euripides-The Phoenician Women (c.411-409 B.C.)] http://www.macedonia.info/FALLACIESANDFACTS.htm Sic semper tyrannis.

malmental

I don't Skype or haven't as of yet..

__________________
(A.S.) - IT | CompTIA (A+, Net+) | MCDST | PMP | DSCE (Dell)
i5-3570K | (i5)^3 SB | i3-3220 | (nVidia)^5 - SLi
US Navy Retired - GS-E (PO3)
daily driver | night rider

LeanWolf

I never claimed it made sense. I don't get it either.

Tipstaff

Context. Up to that point the author has been talking about how the vulnerability deals with only needing the target victims "email address". The guy just forgot or didn't see the point in specifying again that "No access to the victim's inbox is required one just simply needs to know the email address".

In any case, HERE is the original blog that posted the security flaw. Interesting read, and you'll see why it was so damn easy to do.

__________________

Trusteft

ok, it makes more sense now. Thanks.

__________________
Formerly BlueMak

The people who are regarded as moral luminaries are those who forego ordinary pleasures themselves and find compensation in interfering with the pleasures of others(Bertrand Russell)"You go into Afghanistan, you got guys who slap women around for five years because they didn't wear a veil,You know, guys like that ain't got no manhood left anyway. So it's a hell of a lot of fun to shoot them." - Lt. Gen. James N. Mattis
This is slavery, not to speak one's thought. [Euripides-The Phoenician Women (c.411-409 B.C.)] http://www.macedonia.info/FALLACIESANDFACTS.htm Sic semper tyrannis.

LeanWolf

It just wasn't explained properly. That blog you linked to gives step by step instructions, purely "for educational purposes only. The blog author is in no way responsible for any misuse of the information provided." - of course! So it is (or was) possible without knowing the original email password after all.