Yikes! Big security hole in AppleID password reset.

I haven’t checked the internet most of the day, but I was helping someone reset their AppleID so they could set up a new iPad for them. When I went to the I forgot webpage, it said is “Currently Unavailable” A quick check of Daring Fireball revealed the news; you can reset someone’s password knowing their email address and birthdate. That’s a pretty big security hole. Apparently, this stuff isn’t easy.

Info here

2 thoughts on “Yikes! Big security hole in AppleID password reset.

Leave a Reply

Your email address will not be published. Required fields are marked *