<http://schema.org/articleBody>
"UPDATE: Apple's password-reset system currently appears to be down.\nAn Apple account exploit allows anyone with your email address and date of birth to reset your Apple ID and iCloud account password.\nFirst reported by The Verge, the exploit uses Apple\u2019s own tools to break into accounts, using a modified URL and entering someone\u2019s date of birth of Apple\u2019s iForgot page.  Directions on how to take advantage of the vulnerability were published in a step-by-step tutorial.\nOn Thursday, Apple launched two-step verification for Apple ID and iCloud account passwords. When set up, two-step verification would prevent someone from using the vulnerability to access accounts.\nMuch like the two-step verification process for other services, Apple's two-step-verification verifies your identity when your account is accessed from a new device.\nVerification is done using another one of your devices, such as your iPhone. For instance, if you buy a new computer and sign into iCloud on it, Apple will send a numerical code to your iPhone via text message. You take the numerical code sent to your phone, and enter it into your computer to verify you are in fact who you say you are.\nYou can, and should, set up two-step verification on your Apple accounts now here.\n[via The Verge]\nImage courtesy of iStockphoto, sykono"^^<http://www.w3.org/2001/XMLSchema#string>
<http://mashable.com/2013/03/22/apple-security-exploit/>