Facebook glitch allows hackers to reset your password

Until recently, Facebook had a glitch that would have allowed hackers to reset a target user's password just by having the victim visit a website link.

Security researcher Dan Melamed said the vulnerability lies in Facebook's "claim email address" component but has since been patched up.

"The hacker can ... reset the victim's password using the newly added email address, thus allowing the attacker to take complete control over the Facebook account. This vulnerability has been confirmed to be patched by the Facebook Security Team," Melamed said in a blog post.

He said that when a user tries to add an email address that already exists in the Facebook system, they have the option to "claim it."

In claiming an email address, Facebook did not check who the request came from.

Attackers can exploit the flaw using two Facebook accounts, one of which has the email address the attacker wants to claim, and another to initiate the claim process.

Melamed said a hacker can insert a link on a webpage as either an image or an iframe.

Once clicked, the email is added to the attacker's Facebook account, with the victim unaware of what happened.

Another security researcher, Graham Cluley, added a successful attack could let a hacker read private messages, post updates and private messages in the victim’s name.

But Cluley said the good thing was that Melamed acted responsibly, and disclosed details of the security hole to Facebook.

This allowed Facebook’s security team to respond and fix the flaw.

"Melamed was awarded $1500 by Facebook’s bug bounty initiative for responsibly disclosing the vulnerability to the social network," Cluley noted. — TJD, GMA News

Loading...

Editor’s note:Yahoo Philippines encourages responsible comments that add dimension to the discussion. No bashing or hate speech, please. You can express your opinion without slamming others or making derogatory remarks.

  • Phl, US defense chiefs to meet on sea dispute
    Phl, US defense chiefs to meet on sea dispute

    As US aircraft carrier USS Ronald Regan began its journey to Asian waters amid China’s power flexing in the region, Defense Secretary Voltaire Gazmin would try to hear directly from his US counterpart how far America is willing to go to aid its long-time ally against China’s threatening moves in disputed waters. Gazmin flew to Hawaii last Monday to attend ceremonies for the turnover of leadership of the United States Pacific Command (USPACOM) from Admiral Samuel Locklear to Admiral Harry …

  • Water in Angat Dam falls below critical level
    Water in Angat Dam falls below critical level

    The water level of Angat Dam in Bulacan yesterday fell below the 180-meter critical level for irrigation, the Philippine Atmospheric, Geophysical and Astronomical Services Administration (PAGASA) said. PAGASA said the dam’s water level further dropped to 179.98 meters as of 6 a.m. yesterday from 180.2 meters on Monday. The priority is the domestic consumption in Metro Manila, according to PAGASA. …

  • PCSO gets P3-B fund for medical aid
    PCSO gets P3-B fund for medical aid

    The Philippine Charity Sweepstakes Office (PCSO) reported yesterday that an estimated P3-billion charity fund has been allocated by Congress to the agency to provide medical assistance to indigent patients and also give funds to other government offices including the Philippine Drug Enforcement Agency (PDEA) and the Crop Insurance Program. …

  • Image of Asia: Tearing down squatters' homes near Manila
    Image of Asia: Tearing down squatters' homes near Manila

    In this photo by Bullit Marquez, a demolition crew begins to tear down a squatters' community at suburban Caloocan city, north of Manila, Philippines. Population growth and the lack of economic opportunities in rural areas have driven millions of Filipinos into the squatters' colonies that dot the sprawling metropolitan area in and around Manila. Most of the land they occupy is privately owned, and clearing the dwellings often results in violence. The landowner had offered about $1,344 in …

  • SE Asia Stocks - Mostly down; Thai shares near 2-week low

    BANGKOK, May 26 (Reuters) - Most sharemarkets in Southeast Asia fell on Tuesday with the Thai index ending at a near two-week low and the Philippines touching a near four-week low after trade data while ... …

  • China breaks ground on lighthouse project in South China Sea

    China hosted a groundbreaking ceremony for the building of two lighthouses in the disputed South China Sea, state media said on Tuesday, a move that is likely to escalate tensions in a region already jittery about Beijing's maritime ambitions. China's Ministry of Transport hosted the ceremony for the construction of two multi-functional lighthouses on Huayang Reef and Chigua Reef on the disputed Spratly islands, state news agency Xinhua said, defying calls from the United States and the …

  • SE Asia Stocks - Thai, Philippine indexes weak after trade data

    BANGKOK, May 26 (Reuters) - Most Southeast Asian stock markets rose in line with the rest of Asia on Tuesday but the Thai index pared early gains after weak trade data in April, while the Philippine benchmark ... …

  • Is your home on top of a faultline?
    Is your home on top of a faultline?

    The Philippine Institute of Volcanoly and Seismology (PHIVOLCS) recently issued an updated and high-resolution "atlas" of the East Valley Fault and West Valley Fault, two major faultlines that run through sections of Metro Manila. Metro Manila may be due for a 7.2-magnitude earthquake within this lifetime, say experts from the institute, among them PHIVOLCS director Dr. Renato Solidum, Jr. According to records, the last major earthquake caused by the West Valley Fault took place 357 years …

POLL

Should Aquino be held accountable over the Mamasapano operations?

Loading...
Poll Choice Options