Major Security Flaw Lets Anyone Reset Your Apple ID With Just Your Date of Birth

Posted March 22, 2013 at 7:24pm by iClarified | Please help us and submit a translation by clicking here | 8785 views

A major security flaw has been found with Apple's user ID system that lets anyone reset your password with just your email and date of birth, reports The Verge.

Unfortunately, today a new exploit has been discovered that affects all customers who haven't yet enabled the new feature. It allows anyone with your email address and date of birth to reset your password — using Apple's own tools. We've been made aware of a step-by-step tutorial (which remains available as of this writing) that explains in detail how to take advantage of the vulnerability. The exploit involves pasting in a modified URL while answering the DOB security question on Apple's iForgot page. It's a process just about anyone could manage, and The Verge has confirmed the glaring security hole firsthand.

Of course, we're not linking to the instructions on how to do this; however, we would suggest that you enable the two-step verification system that Apple introduced yesterday.

Unfortunately, not everyone can implement two-step verification due to their locations or delays on Apple's side. The only other way to avoid the exploit would be to set a fake birth date for the time being.

Read More

Add Comment
HO - March 23, 2013 at 2:01am
...well, ur holding it wrong!!!
Corwin - March 22, 2013 at 10:00pm
I like it!! Which mean some more flaws with iOS 6.1.4
John - March 22, 2013 at 9:49pm
Hmmm starting to think apple themselves is behind this so everybody can run and enable two step verification...
Dyllon - March 22, 2013 at 8:01pm
There you go Apple screwed up again, first off Steve Jobs would've fixed it so they wouldn't need two-step verification because he would hate that it's not simple. Now there's this and last three firmware's they've been trying to fix a lock screen bypass and this newest version they just released there's already a new one... Smh
Follow iClarified
Both the iPhone 6s and iPhone 6s Plus to Get Force Touch?
Apple has decided to include Force Touch supp...
Watch the Google I/O 2015 Keynote Live Here [Video]
The Google I/O 2015 keynote has just begun. W...
Amazon Launches Free Same-Day Delivery to Prime Members in Over 500 U.S. Cities
Apple Fails to Disqualify Antitrust Monitor in Appeals Court
A federal appeals court has rejected Apple's ...
Todoist Launches To-Do List App for Apple Watch [Video]
Todoist has launched its popular to-do list a...