Security Hole Allows Anyone To Hijack Your Skype Account Using Only Your Email Address (Updated)

[ravip]

A new security hole has been discovered in Microsoft’s Skype that allows anyone to change your password and thus take over your account. The issue was first posted on a Russian forum two months ago and has been confirmed by The Next Web (we have not linked to any of the blogs or posts detailing the exploit because it is very easy to reproduce).

Update: Skype appears to have pulled its password reset page, stopping this flaw in its tracks (Confirmed, read below for details).

We’ve been in touch with Skype over the past few hours to give them a chance to address this vulnerability. The company has informed us it is currently conducting an internal investigation.

To exploit this flaw, all you need to know is your victim’s email address tied to their Skype account. To protect yourself, you would have to change your email address to one that nobody knows or could easily guess, but most likely Microsoft will get around to fixing the problem before that becomes necessary.

More

[topt]

Apparently now fixed -

http://www.theregister.co.uk/2012/11/14/skype_fixes_hijack_bug/

[Guest]

Skype says "I'm sorry" in a nice way. Offers free Skype out calls for 1 month (with limitations naturally)

http://www.skype.com/intl/en-us/prices/subscriptions/unlimited-world

I might just improve my Spanish by calling random numbers in South America

[Guest]

If you want the offer, act fast as the offer is valid only for today. Also remember to put the cancellation date to your calendar.

¹ A fair usage policy applies. Excludes special, premium and non-geographic numbers.

² Trial must be redeemed by 15/11/2012. Offer available only to existing Skype users who have been registered with Skype more than 29 days. To qualify for the offer, you must provide valid payment details. After the first month, your subscription will automatically continue and payments will be taken monthly unless you cancel within 27 days of the start date. Only one free Unlimited World subscription can be claimed per customer. Offer not available in China, Korea, Russia or Taiwan.

³ Calls to mobiles and landlines in these countries: Canada, Guam, Hong Kong S.A.R. China, Puerto Rico, Singapore, Thailand and United States.

⁴ Calls to landlines in these countries: Argentina, Australia, Austria, Belgium, Chile, Croatia, Czech Republic, Denmark, Estonia, Finland, France, Germany, Greece, Hungary, Ireland, Israel, Italy, Japan, South Korea, Luxembourg, Malaysia, Netherlands, New Zealand, Norway, Poland, Portugal, Russia (Moscow and St. Petersburg only), Slovakia, Spain, Sweden, Switzerland, Taiwan, United Kingdom and Venezuela.

[Guest]

Just an reminder if someone subscribed to the free month. Now it's time to cancel it to avoid payments in the future.