European Space Agency records leaked for amusement, attackers say
http://www.csoonline.com/article/3014507/security/european-space-agency-records-leaked-for-amusement-attackers-say.html
Along with database schemas and server stats, a second
post by Anonymous also included 8,107 names, email addresses,
and passwords. A third post exposed contact details for various
ESA supporters and researchers. The leaked data highlights a
troubling problem with regard to passwords used on the
compromised domains. Of the 8,107 passwords exposed, 39 percent
(3,191) of them were just three characters long (e.g. 'esa',
'469', '136', etc.). The second largest set of passwords -
1,314 (16%) - were eight characters long, and based on their
construction would have been easily cracked by most rule sets
and dictionaries. Passwords such as trustno1, rainbow6,
password, 12345678, and those based on the person's name or
email address would be the first to fall.
- - -
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
I have consulted to Google, but I am not currently doing so.
My opinions expressed here are mine alone.
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
