Design Flaw in Yahoo! Mail

SANS Application Security Blog has an informative article on the flawed security built-in to one of the most popular webmail clients, Yahoo! Mail.  This flaw takes advantage of one of the larger online security holes that exist in most any site that requires a username and password – the password reset mechanism.  A similar “hack” [...]