Issue with Yahoo mail
As is commonly known, phone numbers are recycled after their allotted usage. This means that when a user's phone enters recycling, their authentication number is recycled back into use.
This presents a significant security flaw. When a user's phone enters recycling, their authentication number is recycled back into use.
Since Yahoo! does not require a user to know an email address to recover an account but only a phone number, this presents a significant security flaw.
The new buyer of an old phone number can login to Yahoo! mail, type the phone number and access the email of the previous number owner without knowing the email address or credentials. Requiring him to type the email address would solve the problem.
I believe that requiring the person to type the email or first and last name would prevent new buyers of phone numbers from gaining access to the email of the previous owner of the phone number. What do you guys think, and how can this suggestion reach Yahoo? I believe this would prevent many problems for Yahoo users. Thanks.
0 comments
[ 2.7 ms ] story [ 12.2 ms ] threadNo comments yet.