Apple Blocks FaceTime Account Access Flaw

Apple released a public beta of FaceTime for the Mac on Wednesday, and it didn’t take long for users to note that anyone with access to your computer could also get at your Apple ID information. By Thursday afternoon, however, Apple had patched the potential security flaw without requiring users to download a new beta version of the application.

FaceTime for Mac, now with more security goodness

Assuming someone could gain physical access to your Mac, they would be able to access your Apple ID information — the account info that lets you buy music, videos and apps through iTunes — and change your account password without requiring authentication. The patch Apple applied prevents users from accessing the iTunes Store account servers, which means no one can change your password from within the FaceTime for Mac application.

Since the update changes how FaceTime for the Mac accesses Apple’s servers, there’s no need for users to re-download the application t see the security changes.

The FaceTime for Mac public beta is available as a free download at the Apple Web site. Since it is beta software, don’t be surprised to see more bugs crop up before the final version is available.

[Thanks to Cocoa Touch Apps for the heads up.]