Viewing profile — jtraub

Password recovery form was disabled and as of now the vulnerability can not be exploited. See announcement http://community.skype.com/t5/Security-Privacy-Trust-and/Pas...

MS is fixing the problem right now. They turned off password recovery form few minutes ago.

I guess it was done to prevent account stealing while Microsoft works on appropriate fix

I think they can just temporarily turn off password reset to prevent account stealing. After that they can take their time to fix the problem, test it and roll out to the public.

Even now Skype reaction is unbelievable. They are "investigating the issue" for almost 2 hours.