Facebook glitch allows hackers to reset your password

Until recently, Facebook had a glitch that would have allowed hackers to reset a target user's password just by having the victim visit a website link.

Security researcher Dan Melamed said the vulnerability lies in Facebook's "claim email address" component but has since been patched up.

"The hacker can ... reset the victim's password using the newly added email address, thus allowing the attacker to take complete control over the Facebook account. This vulnerability has been confirmed to be patched by the Facebook Security Team," Melamed said in a blog post.

He said that when a user tries to add an email address that already exists in the Facebook system, they have the option to "claim it."

In claiming an email address, Facebook did not check who the request came from.

Attackers can exploit the flaw using two Facebook accounts, one of which has the email address the attacker wants to claim, and another to initiate the claim process.

Melamed said a hacker can insert a link on a webpage as either an image or an iframe.

Once clicked, the email is added to the attacker's Facebook account, with the victim unaware of what happened.

Another security researcher, Graham Cluley, added a successful attack could let a hacker read private messages, post updates and private messages in the victim’s name.

But Cluley said the good thing was that Melamed acted responsibly, and disclosed details of the security hole to Facebook.

This allowed Facebook’s security team to respond and fix the flaw.

"Melamed was awarded $1500 by Facebook’s bug bounty initiative for responsibly disclosing the vulnerability to the social network," Cluley noted. — TJD, GMA News

Loading...

Editor’s note:Yahoo Philippines encourages responsible comments that add dimension to the discussion. No bashing or hate speech, please. You can express your opinion without slamming others or making derogatory remarks.

  • Philippines accuses China of turning water cannon on its fishing boats

    Filipino activists denounced China's coast guard on Tuesday for turning water cannon on Philippine fishing boats in disputed waters, near where hundreds of Filipino and American Marines landed on a beach in a mock assault. The presidential palace in Manila said China's coast guard used water cannon on Monday to drive away a group of Filipino fishermen at Scarborough Shoal, damaging some of their wooden boats. …

  • U.S. says if China used water cannons on Philippine boats, would be provocative'

    The U.S. State Department said on Tuesday that if reports that China used water cannon son Philippine fishing boats in disputed waters are accurate, it would be a provocative step. Filipino activists have accused China's coast guard of turning water cannons on civilian boats in the disputed area on Monday. …

  • Pacmania sweeps Philippines ahead of Mayweather clash
    Pacmania sweeps Philippines ahead of Mayweather clash

    Manny Pacquiao's face is on shirts, dolls and postage stamps, his life story is playing in movie houses and millions are getting ready to party as the Philippine boxing hero's "fight of the century" nears. Pacmania is sweeping the Southeast Asian nation of 100 million people ahead of the May 2 Las Vegas bout against unbeaten Floyd Mayweather to decide who is the best boxer of their generation. Of course, it's the fight of the century," Manila film producer Lucky Blanco told AFP. …

  • ‘Racist remark vs Pinays not reflective of HK sentiment’
    ‘Racist remark vs Pinays not reflective of HK sentiment’

    The Philippine consulate general in Hong Kong believes that the “racist” statement of legislator Regina Ip against Filipina domestic helpers in Hong Kong is not reflective of the general sentiments of the Hong Kong community. Hong Kong is home to more than 173,00 Filipinos working mostly as household service workers. “They have left their loved ones back home to earn a decent living taking care of Hong Kong families. This, in turn, has engendered positive impact on both the quality of life …

  • SWS: Gov’t rating sinks to record low
    SWS: Gov’t rating sinks to record low

    “The Aquino administration is firmly determined to carry on and complete priority programs in all five pillars of the Philippine development plan, to ensure that reforms will be sustained by strengthened public institutions, to tread the righteous path and ensure that good governance becomes the norm at all levels of government, and to sustain and make permanent the gains from the transformation of mindsets and institutions,” Coloma added. Lawmakers expressed belief yesterday that the Aquino …

  • ‘Pacmania’ sweeping the nation
    ‘Pacmania’ sweeping the nation

    Manny Pacquiao’s face is on shirts, dolls and postage stamps, his life story is playing in movie houses, and millions are getting ready to party as the Philippine boxing hero’s “fight of the century” nears. Pacmania is sweeping the nation of 100 million people ahead of the May 2 Las Vegas bout against unbeaten Floyd Mayweather Jr. to decide who is the best boxer of their generation. …

  • House committee to put Bangsamoro police under PNP
    House committee to put Bangsamoro police under PNP

    The House ad hoc committee on the proposed Bangsamoro Basic Law (BBL) will put police forces in the envisioned new autonomous Muslim region under the Philippine National Police (PNP), and not under the regional chief minister. “We will delete the provision in the draft BBL giving the chief minister operational, administrative and disciplinary control over police forces in the region,” Cagayan de Oro City Rep. Rufus Rodriguez, committee chairman, said in a television interview. He said under …

  • Phl to seek more US military aid
    Phl to seek more US military aid

    The Philippines said yesterday it would soon ask the United States for more military equipment and training to build its defenses, as it faces Chinese “aggressiveness” in disputed waters. As hundreds of Filipino and American Marines simulated an amphibious assault to reclaim territory from invaders during annual war games, Armed Forces chief Gen. Gregorio Pio Catapang said he was drafting a “wish list” for US aid. Catapang said the Philippines would ask for “equipment and training” when …

POLL

Should Aquino be held accountable over the Mamasapano operations?

Loading...
Poll Choice Options