When a user tried to recover their account, they were asked to enter their full name, email. Galloway says the flaw resided within Myspace’s account recovery page. Double-click the downloaded file to install the software. We’re not sure when, exactly, Myspace made the change, but that URL now redirects to a “Log in” support page.ĭownload the free trial version below to get started. After that, Myspace would just log you into the account and let you change the password and associated email.īut if you’re interested in testing the security flaw (or stealing someone’s account), hear this: As Galloway’s post was picked up by numerous news organizations, Myspace pulled the recovery page that Galloway cites in her post (myspace. When a user tried to recover their account, they were asked to enter their full name, email, and date of birth.Īnd apparently any account could be hijacked by just inputing the person’s birthday, Galloway says, because Myspace wasn’t validating users’ emails. She said she’s been trying to get Myspace to fix it since April, but hasn’t heard back from anyone. Security researcher Leigh- Anne Galloway first reported the flaw on her blog Monday morning. And for months, the social network reportedly had a security flaw that made it ridiculously easy to hack into any profile with just a date of birth. Space Nukes Massive Security Loophole (But Go Delete Your Stuff Anyways)Remember Myspace? Yeah, it’s still a thing.

Seagate file recovery v2.0