Back from Holidays in Vermont. Sore from snowboarding and about 5 lbs heavier from all the eggnog.
Yahoo Personals has a security hole which was uncovered by Bennett Haselton. The problem appears to be minor. Basically, someone could grab a dater’s pet name or birthday from their personal ad and use that information reset the password, in effect taking over the account. CNET News.com alerted the company to the issue.
Yahoo plans to change the way it updates the age field in members’ profiles. Yahoo is not alone when it comes to security issues, Match, Lavalife and American Singles exhibit the same weakness and I’m sure other sites without dedicated security staff could come under attack if hackers deem the opportunity worthy of their skillz.
[tags: safe+dating]
