David Ansermot Web Developer / TYPO3 Integrator

FaceTime for Mac opens the door to a big security flaw in the Apple ID

At the same time as the new MacBook Air and Mac OS “Lion“, Steve Jobs introduced FaceTime for Macintosh.

Unfortunately, it seems that the software is equipped with a security rather consistent.

Indeed, it seems that once identified with his Apple ID with the application, a user can change the password directly, without having to enter first the old password.

Suddenly, any person sitting behind the computer can compromise the account associated with an open session. This is for the entire Apple ID. Thus, if the rightful owner of the account as stolen at the same time is connected to iTunes, then it will deny access and the new password will be requested.

The attacker, he may at leisure offer music of your choice on your money.

In short, a flaw which is not critical but may, under certain conditions, cause many problems.

Posts that maybe you want to read ::

• Apple FaceTime “security flaw” fixed
• Security flaw discovered iOS 4.1
• A flaw in IOS 4.1 allow access to personal datas
• A variant of Koobface attacks Mac OS X
• A 12 years old hacker found a critical flaw in Firefox