Private Yale Student Info Accessible via Google Search

by Jeff James
8/25/2011

While we're normally flooded with news about hackers who routinely 
bypass security systems and exploit zero-day vulnerabilities to gain 
access to sensitive systems, recent news from Yale University 
underscores that the vast majority of IT security failures are caused 
by human error, neglect, or plain ignorance. I've written about how 
users are often the weakest link in IT security, but that maxim can 
apply to simple human error in general.

According to the Yale student newspaper, the University is notifying 
43,000 staff, students, and alumni that sensitive personal 
information -- like names and social security numbers -- were 
inadvertently made accessible to internet searches when a file 
containing that information was left unprotected and unsecured on an 
FTP server that was used as a storage location for open source 
software.

...

http://www.windowsitpro.com/blog/security-blog-12/security/private-yale-student-info-accessible-google-search-140325

_______________________________________________
Medianews mailing list
[email protected]
http://lists.etskywarn.net/mailman/listinfo/medianews

Reply via email to