Yahoo to plug security hole in dating site

Fix comes after security expert finds clues in online profiles that could let intruders reset passwords.


Yahoo plans to tighten security on its dating site after a security expert uncovered a method for breaking into members’ accounts.


The main problem is that Yahoo Personals ads contain clues about key personal information–namely birth date and ZIP code–that members also use to reset their passwords. If an intruder obtains that data, the only thing that would block him from changing passwords and accessing accounts are members’ secret questions, such as “What’s your pet’s name?” “What is your favorite pastime?” and “What is your all-time favorite sports team?”


CNet

Leave a Reply