View Single Post
Old 19-11-2004, 09:47   #1
nffc
cf.mega poster
 
nffc's Avatar
 
Join Date: Jul 2004
Location: chavvy Nottingham
Age: 42
Services: Freeview, Sky+, 100 Mb/s VM BB, mega i7 PC, iPhone 13, Macbook Air
Posts: 7,489
nffc has a nice shiny star
nffc has a nice shiny starnffc has a nice shiny starnffc has a nice shiny starnffc has a nice shiny starnffc has a nice shiny starnffc has a nice shiny starnffc has a nice shiny starnffc has a nice shiny starnffc has a nice shiny starnffc has a nice shiny starnffc has a nice shiny starnffc has a nice shiny starnffc has a nice shiny starnffc has a nice shiny starnffc has a nice shiny starnffc has a nice shiny starnffc has a nice shiny starnffc has a nice shiny star
Hotmail / MSN: more pathetically incompetent than NTL?

The ease of "hacking" a Hotmail account (ie. locking the legitimate user out by resetting the password by using the secret question, then changing the secret question) is pretty well-documented, mainly because there are lots of them and because it's so simple to do, if you can research the secret answer...

Well there was me reading the other hotmail thread when I stumbled across the "alternate email" field. Being an inquisitive fella I clicked the "More" link... and it said something about it's used to send reset instructions if you've forgotten your pw/ secret question... good idea I thought...

Except MSN have got it the wrong way round!

Instead of the logical step, a la Gmail, ie using the email FIRST and not bothering with secret questions, or the O2 approach (answer the secret question and your password is sent via SMS or even emailed to the alternate), no MSN have used it if you can't remember password or secret answer .

So basically, it's even easier to lock people out now- if you reset the password, secret answer and then change the email as well!

I might point this out to them, it's so stupid it's untrue. Then again, they'll probably fob me off with ********, like they usually do. Anyone else, feel free to do the same! The more people that tell them, the more they may realise it's a problem!
__________________


nffc is offline   Reply With Quote