Skype have serious security issue|

Skype have serious security issue|

A serious security issue has been discovered in Skype which allows hackers to easily exploit on user account just by knowing user email addresses.

In this Skype security hole anyone can change your password and take over your account.This issue was firstly reported on russian forums a months ago.

Here is what skype said on this security issue.

We have had reports of a new security vulnerability issue. As a precautionary step we have temporarily disabled password reset as we continue to investigate the issue further. We apologize for the inconvenience but user experience and safety is our first priority

Here is how this exploit works:

The reason this works is simple, but it's still worrying. When you use an existing email address to sign up with Skype again, the service emails you a reminder of your username, which is okay, since no one else should have access to your email. Unfortunately, because this method enables you to get a password reset token sent to the Skype app itself, this allows a third party to redeem it and claim ownership of your original username and thus account.