Remember MySpace? Well, it turns out the social media platform that subtly taught us how to code while tiering our friends like a thousand-year-old cast system, is very easily hacked.
How easy is it to hack an account, you may ask?
Well, all you need is someone’s birthday and you’re in.
It turns out if you go to the website’s account recovery page (ie: you forgot your password), the page will ask for the account holder’s name, username, original email address, and birthday. But, you only really need to know the person’s birthday in order to get hold of the account. I mean, you also need the person’s name, but that’s displayed on the account already. The email address, however, can be 100% fake, but the website will still give you immediate access to the account.
Originally found by security researcher Leigh-Anne Galloway, she discovered the bug back in April, and even tried to alert MySpace about the flaw, but they never responded.
So, if you somehow haven’t deleted your old account, now is 100% the time do so.
[Via The Verge]