Just In
- 50 min ago Realme Narzo 70 Pro 5G With Sony IMX890 OIS Camera, Dimensity 7050 Launched in India; Price and Availability
- 2 hrs ago Xiaomi Civi 4 Pro to Debut as First Snapdragon 8s Gen 3 Smartphone on March 21: Leica Cameras Confirmed
- 2 hrs ago Is This the Most Expensive Honor Phone Ever? Honor Unveils Magic6 RSR & Magic6 Ultimate
- 3 hrs ago Apple Watch Series 10 Might Finally Get Galaxy Watch-Inspired Blood Pressure Monitoring Feature
Don't Miss
- Movies Elvish Yadav Snake Venom Controversy: How Bigg Boss OTT 2 Winner Spent His First Night In Jail? DEETS
- News World's Most Polluted Capital - Delhi: Decoding Contributing Factors
- Sports Swiss Open 2024: Indian Schedule, Results, Telecast & Live Streaming Info
- Finance Gold Prices India, March 19: Biggest Jump In Yellow Metal Prices In 10-Days, Buy?
- Automobiles Ampere Nexus Electric Scooter Completes K2K Run – Pre-Bookings Open
- Education Andhra Pradesh Teacher Eligibility Test Result 2024 To Be Out Soon, Know more
- Lifestyle Holi 2024: 7 Comfy And Stylish Outfit Ideas To Enjoy The Vibrant Festival
- Travel Celebrate Lathmar Holi in Nandgaon on March 19: A Colorful Tradition of UP
Facebook flaw may let strangers 'break into' your account spotted
Facebook's account recovery feature seems to have a flaw.
A security researcher claims to have spotted a flaw in Facebook's account recovery feature that can let anyone easily break into your account -- that too, without you ever noticing, media reported on Friday.
According to a report in the Independent, "there is no need of password to gain access and scammers can also lock you out of your own account".
The discovery was made by 18-year-old James Martindale when he inserted a new SIM card into his phone.
Martindale quickly received a message from Facebook informing him that "he had not logged into his account for a while, despite not having tied the new number to his account", the report said.
He then searched for the number on Facebook which brought up a single account.
SEE ALSO: Facebook camera lets you create GIFs
Martindale then attempted to log into the account by using the number as the username and typing in a random password but failed because the password he entered was wrong.
He clicked on 'Forgot Password' option to recover his account but failed again.
Martindale searched for the account with the new number and found a list of account recovery options -- comprising an email address and six phone numbers -- for regaining access to the account.
"One of these options was for Facebook to text a password reset code to the very number Martindale had just tried to log in with," the report said.
After selecting the option, he received the code and successfully logged into the 'person's' account.
"Facebook then gave him the option to change the password, which would have locked the real user out of their account, or to skip that stage, which means he never would have known his account had been hacked," the report pointed out.
Martindale performed the same trick with another new number and it resulted the same.
IANS
-
99,999
-
1,29,999
-
69,999
-
41,999
-
64,999
-
99,999
-
29,999
-
63,999
-
39,999
-
1,56,900
-
1,39,900
-
1,29,900
-
79,900
-
65,900
-
12,999
-
96,949
-
16,499
-
38,999
-
49,999
-
30,700
-
1,17,840
-
23,960
-
82,510
-
14,999
-
25,999
-
24,999
-
19,999
-
17,970
-
21,999
-
13,474