Apple password reset website – gaping hole found, fixed
Apple has had a good-bad-good-bad week of it in the computer security environment.
Its announcement of two-step verification for some users was quickly followed by a report of a password recovery exploit for everyone else…
Story added 23. March 2013, content source with full text you can find at link above.