New answers tagged

0 votes

Can a password change via CSRF lead to account takeover?

I also don't know what's the vulnerability and impact, because attackers can't change the other use'sr password without sending a link. And if the attacker sends a link and the user clicks and logs in ...
user avatar
0 votes

Android phone's lockscreen PIN disappeared?

Firstly dropping the phone wouldn't have done that. Sometimes 2FA codes are sent by such numbers, seen it before. Those WhatsApp accounts will likely be old. People lease a number rather than own it. ...
user avatar
  • 23
6 votes

Someone created a Disney+ account with my e-mail address. Are there any security concerns?

This has happened to me as well. You have two options: completely ignore the situation or take over the account (by using "Reset password"). In both cases there's no risk or anything. Your ...
user avatar
8 votes

Someone created a Disney+ account with my e-mail address. Are there any security concerns?

While it is possible someone else created the account and paid for it, it's pretty unlikely. It's more likely it's actually your account. Did you recently get a new phone or phone contract? Verizon, ...
user avatar
  • 7,472
28 votes
Accepted

Someone created a Disney+ account with my e-mail address. Are there any security concerns?

Yes, it's possible to use your email address and pay via credit card, PayPal, subscription cards or the respective mobile providers (Apple / Google Pay). It does not have to be a payment with Apple ...
user avatar
  • 675
1 vote

Does showing the permission level of an account to all users a bad security practice?

In a case like this, I don't really see how hiding the user level would help. Sure, you could give everyone the same icons and not display it there - but you can't hide their actual role in the ...
user avatar
  • 4,199
1 vote
Accepted

Does showing the permission level of an account to all users a bad security practice?

Is it a bad security practice ? For me this looks like the common trade-off between usability and security. Hiding or obscuring information can help in security - sometimes a bit and sometimes a lot ...
user avatar

Top 50 recent answers are included