I don't understand the break-in part. Yahoo put the password recovery feature out there for anyone to use it. When I try to recover a password on Yahoo, does it say, "if you are not "john Doe" of New York, NY bearing Social Security number 333-33-3333 then using this tool to recover your password is a crime"?

Without the "If you are not authorized for this access then attempting to access this service is illegal", isn't there no case for someone who does access the service?

Further, does Yahoo T&S give rights over the mail to whoever creates the account and makes anyone else accessing the account illegal?

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/482/35222#35222