Security loophole uncovered in FaceTime for Mac

A security flaw has been uncovered in Apple's FaceTime for Mac video chat tool just one day after its introduction.

The application reportedly fails properly to conceal account information relating to the Apple ID service, putting users at risk of account theft in certain situations.

Apple news site Macnotes.de said that, when the FaceTime application is active, user account details, including password and recovery questions, can be accessed without the need to enter authentication information.

Apple introduced a beta version of FaceTime earlier this week for Mac OS X Leopard. The application is expected to be included as part of the Mac OS X Lion release.

The report suggests that a third party could potentially access a machine and take over the Apple ID account of the original user.

Additionally, auto-save components in FaceTime will log password information, allowing a third party to launch the application without entering a password.

The flaw requires physical access to the machine, but could pose a threat to those who use a public system or share their computers with others.