Finding its security policies flawed, after a hacker was able to take over the identity of ‘Wired’ reporter Mat Honan and virtually disrupt his digital life by wiping all his connected Apple machines and Google account, Apple has stopped accepting AppleID password resets over the phone, for the time being.
Apple sources, on condition of anonymity, said that the company has kept the over-the-phone password reset feature under freeze at least for a 24-hour period or until Apple makes a clear idea on necessary changes to its security policy.
In the backdrop of the incident, Amazon also has reportedly closed a hole in its security policies which helped hackers to take over Amazon accounts by contacting Amazon customer care with the email address, name and mailing address of the victim. In this age of internet, it’s easy to find out such information
The Wired reporter just became a victim of Apple’s poor security policies which allowed anybody to ask for a password reset over the phone.
In case the hacker failed to answer the exact security questions, like what happened in Honan’s case, Apple will still give away the reset link by just asking for some personal information like the billing address and the last four digits of the credit card, which can be collected over the internet.
We hope Apple will change its security policies in such a way that it won’t risk any of its user’s security and privacy.