Password denied: when will Apple get serious about security?
Last Friday, The Verge revealed the existence of a dead-simple URL-based hack that allowed anyone to reset your Apple ID password with just your email address and date of birth. Apple quickly shut down the site and closed the security hole before bringing it back online.
Read more: Password denied: when will Apple get serious about security?
Story added 1. April 2013, content source with full text you can find at link above.