How I Accessed Your Technorati Account

Recently I’ve discovered that I can enter Technorati as someone else with absolutely no effort at all.

Those of you who use WordPress are aware of the Incoming Links section on the dashboard, and that when you click on the “more” link you are taken to your account in Technorati. Well, when I click on it, I’m taken to someone else’s account.

To be clear, this means that I am signed on as that person and have access to everything in that person’s account: blogs, bio, password. If I wanted to, I can lock these people out of their accounts by changing their password.

Scary, huh?

Naturally, I was concerned over this so I paid a visit to Technorati’s forum to post a topic. The title of the post is “Technorati: You have a security breach!” You’d think that with a title like that, sirens would be going off. Nope, at least not as of this writing.

And get this: if you take a look at the post in the forum, you’ll note the post was first started by MRO74. That was me who typed it, but it’s not my account. Then came the reply from Trizeke; also me, but not my account.

Then the third time I returned, I posted a response again, but this time it was davincim. Now, that’s me!

Can anybody else repeat this? At the very least I recommend you visit your account more frequently than usual to see if everything’s okay. I don’t imagine changing your password is going to protect you because I didn’t need one to get in these people’s accounts.

[tags]technorati, security, breach[/tags]