Run AWAY from paypal!

[born2hack]

yesterday I discovered this small flaw in the paypal system. If you are trying to reset the password of your paypal account you can do it by simply entering your phone no. or street no. a mere 2-10 digits and you get to change the password. try it yourself!

[Terracotta]

If it's like that then you should be highly cautious and keep your information secret, also did you inform paypal about this ? I will also take a look of it.

[born2hack]

right, now I am making fun of that, BTW always put your fake information in phone no. and address, if you did not modify it right away.

[Terracotta]

If you put fake information in your phone no and address how will you get verified ??

[born2hack]

Verify and then modify asap BTW UPDATE: My friend lost 27$ yesterday, and the guy CLOSED his account. Then mailed him saying that he used his street no. to hack the account with hundreds ':P'

[Terracotta]

Paypal continuosly and periodically reviews the accounts and what if they find fake informations ? Our accounts will be locked immediately.

[santosh9999]

This is Completely news to me this is the next level of hacking man!!! i think i have to update my paypal ASAP and the will some thing as my address that no one else can even guess

[falloutvic]

I will try to check about this one. But, as said in the earlier post, you should modify the accounts and add fake numbers. I think this is wrong. This will make things worse because paypal regularly checks every account. The account will be suspended if you're caught faking the infos.

[Terracotta]

Verify and then modify asap BTW UPDATE: My friend lost 27$ yesterday, and the guy CLOSED his account. Then mailed him saying that he used his street no. to hack the account with hundreds ':P'

I think if you change the address you will need to verify the account again.. However I am not sure about this..

[ihateasianparents]

Wow theres a flaw?
Can anyone confirm this is actual bug?

[PYL]

but if you have a different mail address the money can't be withdrew. How could you withdraw money from them then? it is too risky since the failed withdrawal will charge you money too.

[csongi12xme]

Paypal is the most used Payment Processing website.
And they have to charge you money.
How else could they pay hosting,employers?

[Lovely]

I think it is a hole which paypal should have taken care of...

[roosevelt]

So, are you telling me you can enter a new password in the account? Or they email you a temporary new password?

[fur]

If this news true , then we must inform paypal about this new hacking type .So they can taking more attention about their security method in the future..