Security News > 2017 > July > A Man-in-the-Middle Attack against a Password Reset System (Schneier on Security)

This is nice work: "The Password Reset MitM Attack," by Nethanel Gelerntor, Senia Kalma, Bar Magnezi, and Hen Porcilan: Abstract: We present the password reset MitM (PRMitM) attack and show how it can be used to take over user accounts. The PRMitM attack exploits the similarity of the registration and password reset processes to launch a man in the middle...

News URL

https://www.schneier.com/blog/archives/2017/07/a_man-in-the-mi.html