Yahoo tries to reduce concerns regarding recycling of e-mail accounts
Yahoo recently announced that it will recycle all inactive email accounts over a year ago , so you can have the user name you always wanted. So instead of being Juan93582 @ yahoo, can be simply firstname.lastname@example.org. However, this plan has a Security flaw, pointed to by the journalist Mat Honan of Wired , who last year suffered a major hack your accounts .
Honan notes that this measure would allow attackers to Yahoo account holders get old like someone else has been using as a backup account. Thus, the attacker can request a password reset primary account through this support.
Yahoo said that most inactive accounts are not associated with an Email account, and said he is taking a number of steps to ensure that this danger does not materialize. The company will establish a period of 30 days from the time the account is deactivated before recycling. During that period, the Mail received in the account will receive a response stating that E-Mail does not exist. Yahoo also said desuscribirÃ¡ inactive accounts to trade post as newsletters and alerts, and notify all sites associated with the account that this e-mail will be recycled.
Thus, service providers must also take responsibility to prevent Yahoo data to be used maliciously. “I can say with 100% certainty that it is absolutely impossible for something to happen? No. But we are taking extraordinary steps to ensure that nothing bad happens to our users, “said Yahoo manager Dylan Casey told Reuters.
– Yahoo’s very bad notion to release e-mail addresses (Wired)
– Yahoo rejects fears hackers will exploit old user IDs (Reuters)