funsec mailing list archives

Re: Police secret password blunder


From: "Stephen J. Smoogen" <smooge () gmail com>
Date: Wed, 5 Apr 2006 10:26:07 -0600

On 4/5/06, Jeff Rosowski <rosowskij () ie ymp gov> wrote:
Why stop there? It gets better if you are a little more patient:
http://www.google.com/search?q=%22View+TABLE%3A%22+ID+%22Full+Name%22+email+password+Organization+site%3Acustomscripts.police.nsw.gov.au&btnG=Search

Hey, Nicole and Webb have the same password as me!

I'm still wondering why the passwords were being stored as plain text.
_______________________________________________

Its the last time they will buy software protection from Evil
Geniuses, Corp (we help the enemy more than you.)

More than likely, the had a page that autogenerated a list of
passwords (that way if you forget you can look it up again) and a
master list of them.


--
Stephen J Smoogen.
CSIRT/Linux System Administrator

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: