Changes

Reset passwords and security questions

0 bytes added, 8 years ago
|Scenario Task Parent=I want to protect my email account from unauthorised access
|Scenario Task Type=Hacking, Unauthorised Access
|Scenario Task Description=Password are easily forgotten (unless you are using a [https://securityinabox.org/en/guide/keepass/windows password program) ] and the service provider offers several opportunities for you to reset this password or to prove your identity. Whilst often necessary, both options may result in a security risk and need to be thought through carefully in advance. Please read this [http://www.wired.com/2012/08/apple-amazon-mat-honan-hacking/ Wired article from Matt Honan] for an excellent description of the problem.
# Resetting a password by sending the code to another email account opens up another attack vector for the hacker. If they can break into one account and then request the reset password to another account to be sent there, you are worse off than before
Bureaucrat, emailconfirmed, administrator, translator
662
edits