Leaves it to carriers, promoting a complaint to Irish data cops from Big Tech's bête noire
The core problem is that telecom companies recycle phone numbers that have been abandoned after a brief waiting period – at least 45 days in the US. That can become a problem because many online services require a phone number to identify users and/or send one-time passwords for two-factor authentication. Users who abandon a number, and forget to update their new number, are therefore at risk of malicious account reset attempts by whoever gets access to their old numbers.
Nonetheless, it appears this vulnerability persists with other online services that rely on mobile phone numbers for multi-factor authentication.gaining access to a"random girl's" account by using a newly provisioned mobile phone number to login to Meta's Instagram service. But not having the password isn't necessarily a barrier. The phone number may be sufficient to reset the password and access it despite multi-factor authentication. Typically, users are sent notification of the password change to the email address associated with their account.
Procedural variations aside, initiating a password reset without permission to hijack an online account is against the law in the US, the UK, and elsewhere, Hanff wrote in hisHanff subsequently tried to alert Meta."I reported this under their security vulnerabilities system as there is no other obvious way to report this," he told."Obviously I am not interested in any bounty, I am just trying to get this fixed, but Meta has a habit of obstructing people from contacting them.
Brasil Últimas Notícias, Brasil Manchetes
Similar News:Você também pode ler notícias semelhantes a esta que coletamos de outras fontes de notícias.
Yet another club changes managers ahead of facing Newcastle UnitedJon Dahl Tomasson leaves Blackburn - Yet another club changes managers ahead of facing Newcastle United
Consulte Mais informação »
How the humble dividend might rise againMeta’s move to start the payouts could signal an upcoming switch in investor mindset
Consulte Mais informação »
Gooey Chewies: A Delicious No-Bake Northern Irish SpecialityLearn how to make Gooey Chewies, a delicious no-bake treat originally from Northern Ireland. These easy-to-make treats require no baking and are perfect for sharing with friends and family. Crush biscuits and chop cherries, then mix and flatten the mixture in a tray. Enjoy the gooey goodness!
Consulte Mais informação »
‘Uninvestable’: China’s $2tn stock rout leaves investors scarredSome global fund managers fear government efforts to stabilise the market are too little, too late
Consulte Mais informação »
Closure threat to Ayrshire community hub leaves service users fearing for their futureThe Morven Day Centre in Kilmarnock, which provides support and activities for adults with mental health problems or learning disabilities, is facing closure due to withdrawal of funding. Service users express their concerns about the potential impact on their lives.
Consulte Mais informação »
Airdrie crash leaves man fighting for life as car hits parked van then another vehicleA male driver is in hospital life-threatening injuries and another driver was injured in the incident, which closed Airdrie's High Street area for around eight hours.
Consulte Mais informação »