Apple Security Flaw Found

It's kind of like when the most popular kid in school gets tripped. Tech news site The Verge said Friday it has found a step-by-step tutorial online showing how to change another user's Apple ID and hijack their account using a modified Apple URL. Though Verge did not post a link to the tutorial out of safety concerns, it recommended that users enable Apple ID's two-step verification, which sends users a new code every time they want to access their account. However, some users report notifications saying that they must wait three days before using the two-step verification. Apple, meanwhile, says they are working on a fix and have taken down the iForgot page, which was a key part of the hijacking process.