<p>Facebook users who login using Hotmail and other web-based email services might be vulnerable to account hijacks, due to a loophole related to expired addresses.</p><p>Microsoft deactivates unused Hotmail accounts after 270 days of inactivity, reassigning the addresses to any new user who requests them after a certain period of time.</p><p>Those email addresses can then be used to reset passwords and log into other sites such as Facebook potentially allowing attackers to gain control of profiles.</p><p>Research from New Jersey-based Rutgers University, noted by New Scientist, found that a would-be attacker could locate expired Hotmail addresses using a simple script. The script sent out test emails to specific addresses any bouncebacks indicated that an account had been deactivated, leaving the researchers free to request the address.</p><p><a href="http://www.pcpro.co.uk/news/security/381721/hotmail-loophole-leaves-facebook-accounts-vulnerable">Keep reading...</a></p><p>Read also:</p><p><a href="http://theconversation.com/potential-facebook-hack-expired-emails-14091">Potential Facebook hack: expired emails - The Conversation</a> (The Conversation)</p><p>Explore: <a href="http://news.google.com/news/more?ncl=dAin_1o6DOUFKvMVu0foPv6ED2iCM&ned=us">2 additional articles.</a></p>