Comments on: Vulnerability in Xoom’s Password Retrieval Procedure?

By: Xoom accounts - easy target for hackers?? Not anymore! » Kukote in a Jar Beta

Fri, 27 Oct 2006 06:40:07 +0000

[...] As some of you know, that post got yugateched, j spotted, technopinoyed, pinoytechblogged and gavilaned. I checked their recovery password now, and they already made the necessary changes to mitigate this security risk. The New Password screen link will now be sent to your e-mail address. [...]

By: J. Angelo Racoma

J. Angelo Racoma — Wed, 25 Oct 2006 17:05:47 +0000

@jhay, yes. Paypal does have its quirks, too, but I don’t think the security vulnerability is as bad as Xoom’s.

@Anya, I don’t think creating an account would give you a problem. Just make sure you mitigate the risks by using an alternate ZIP code. At least that would minimize the possibility of people correctly guessing.

@Mike, I don’t think so. Have you contacted them?

By: Mike

Mike — Wed, 25 Oct 2006 05:04:03 +0000

Has Xoom been informed of this vulnerability? I’m concerned because I also use Xoom.

By: Anya

Anya — Tue, 24 Oct 2006 08:52:02 +0000

Whoa… I was close to making an account…

I Y!PM-ed you but you signed out. Hehe. I received your PM though. Offline lang kasi ako

By: jhay

jhay — Mon, 23 Oct 2006 13:25:27 +0000

Well, another reason why we need PayPal in all its functionality here in the Philippines.