Password Reset in Yiyou mail system can be cracked by brute force

Password Reset in Yiyou mail system can be cracked by brute force

Rt

The Yiyou mail system was used by a large number of users and found that answers to questions in Yiyou password retrieval could be brute-force cracked. If there is a simple question, such as: birthday? Attackers can use 8 to brute force password cracking for the birthday dictionary to successfully reset the password.

1. Simple resetting
 

2. brute-force cracking
 

3. Reset the password
 

 

4. log on to your mailbox
 

 

Solution:

1. Set the verification code for resetting the password. 2. Limit the number of errors.