A researcher was able to brute force SMS codes.
It was a significant find, as Meta seems to be putting more and more focus on its Accounts Center feature, letting you manage settings and security information from it, as well as use it to. According to Mänôz, the attack was relatively simple; if you knew the phone number or email address the other person used for two-factor authentication, you could link it to your own account, which would remove it from the victim’s.
The thing that’s supposed to prevent this is a six-digit authentication code that gets sent to the other person’s account or phone number, which you don’t have access to. The bug Mänôz found, however, let an attacker guess that code however many times they wanted — set a program or script to do that task, and it would eventually guess right.
In the worst-case scenario , this would entirely turn off 2FA on the victim’s account. The fact that it was running through Account Center also defeated some other security measures; according to Mänôz’s post, Facebook wouldn’t usually let you add an already-registered email address to your account, but this method bypassed that.
Meta seems to have fixed the issue relatively quickly. Mänôz reported it on September 14th, 2022, and it was dealt with by mid-October after the company’s security team actually figured out how to test it. Meta ended up paying Mänôz a $27,200 bug bounty for reporting the issue.
Ireland Latest News, Ireland Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Disaster Recovery Center in Selma moves to new location - Alabama NewsThe new location will be at the Felix Heights Community Center on Medical Center Parkway.
Read more »
Recovery center open for the weekend, aiding people affected by destructive tornado in Pasadena'You gotta go through storms before you get to the rainbow,' one man said after losing his home in Pasadena and now sleeps in his car with his two dogs.
Read more »
Billy Packer was center of ridiculous backlash as sports world began declineBilly Packer, who died Thursday at 82, helped remind us that the sports world had gone — and remains — nuts.
Read more »
New Tucson Medical Center program benefits rural heart patientsThe Tucson hospital has been offering remote cardio rehabilitation to patients living in Benson since September. TMC says it hopes to expand to other rural areas in southern Arizona.
Read more »
Memphis beating video puts spotlight on first police accountNewly released video shows Memphis police officers battering motorist Tyre Nichols with punches and kicks and also using pepper spray and a baton
Read more »
Memphis beating video puts spotlight on first police accountNewly released video shows Memphis police officers battering motorist Tyre Nichols with punches and kicks and also using pepper spray and a baton.
Read more »