U.S. gov. accidentally publishes own short-URL 'admin' API key

Summary: Days after the Go.USA.gov short-URL service's API became 
available to U.S. government employees, the department accidentally 
published the admin username and API key, allowing hackers to 
potentially create short URLs to phishing, scam or malware-ridden 
sites.

By Zack Whittaker for Zero Day
November 1, 2012
ZDNet

The U.S. government mistakenly published a secret administrator's 
username and private API key on its short URL website that could have 
potentially allowed anyone to redirect Web users to malware-ridden 
pages through the official U.S. government short URL service, ZDNet 
has learned.

...

http://www.zdnet.com/u-s-gov-accidentally-publishes-own-short-url-admin-api-key-7000006752/

_______________________________________________

Please be sure to include a URL to the article. Reply to the sender with a 
"Thank you" if you like this post.
_______________________________________________
Medianews mailing list
[email protected]
http://lists.etskywarn.net/mailman/listinfo/medianews

Reply via email to