Trusted Friend Attack

Ashar Javed is a research assistant in Ruhr University Bochum and working towards his PhD. He has been listed Nine Times in Google Security Hall of Fame, Twitter/Microsoft/Ebay/Adobe/Etsy/AT&T Security Pages & Facebook White Hat. In this podcast, he shares his research on “forgot your password” functionality of fifty popular social networks and investigate the security of the password recovery mechanisms. He was able to compromise accounts on six social networks, block account on one big social network due to the weaknesses in the password recovery feature and help from their untrained and naive support teams during the account recovery process.