New answers tagged account-security
0
votes
Can a password change via CSRF lead to account takeover?
I also don't know what's the vulnerability and impact, because attackers can't change the other use'sr password without sending a link.
And if the attacker sends a link and the user clicks and logs in ...
0
votes
Android phone's lockscreen PIN disappeared?
Firstly dropping the phone wouldn't have done that.
Sometimes 2FA codes are sent by such numbers, seen it before. Those WhatsApp accounts will likely be old. People lease a number rather than own it. ...
6
votes
Someone created a Disney+ account with my e-mail address. Are there any security concerns?
This has happened to me as well.
You have two options: completely ignore the situation or take over the account (by using "Reset password").
In both cases there's no risk or anything. Your ...
8
votes
Someone created a Disney+ account with my e-mail address. Are there any security concerns?
While it is possible someone else created the account and paid for it, it's pretty unlikely.
It's more likely it's actually your account. Did you recently get a new phone or phone contract? Verizon, ...
28
votes
Accepted
Someone created a Disney+ account with my e-mail address. Are there any security concerns?
Yes, it's possible to use your email address and pay via credit card, PayPal, subscription cards or the respective mobile providers (Apple / Google Pay). It does not have to be a payment with Apple ...
1
vote
Does showing the permission level of an account to all users a bad security practice?
In a case like this, I don't really see how hiding the user level would help. Sure, you could give everyone the same icons and not display it there - but you can't hide their actual role in the ...
1
vote
Accepted
Does showing the permission level of an account to all users a bad security practice?
Is it a bad security practice ?
For me this looks like the common trade-off between usability and security.
Hiding or obscuring information can help in security - sometimes a bit and sometimes a lot ...
Top 50 recent answers are included
Related Tags
account-security × 702authentication × 106
passwords × 94
email × 48
multi-factor × 45
privacy × 41
web-application × 37
password-management × 36
encryption × 29
google × 26
android × 19
password-policy × 19
gmail × 19
malware × 18
password-reset × 18
facebook × 16
network × 15
password-cracking × 15
account-lockout × 15
tls × 13
windows × 13
web-browser × 13
access-control × 13
one-time-password × 12
banks × 12