Data breach at IEEE.org: 100k plaintext passwords

Printable View

26-09-2012, 03:23 AM
xxMATTGxx

Data breach at IEEE.org: 100k plaintext passwords

Quote:

IEEE suffered a data breach which I discovered on September 18. For a few days I was uncertain what to do with the information and the data. Yesterday I let them know, and they fixed (at least partially) the problem. The usernames and passwords kept in plaintext were publicly available on their FTP server for at least one month prior to my discovery. Among the almost 100.000 compromised users are Apple, Google, IBM, Oracle and Samsung employees, as well as researchers from NASA, Stanford and many other places. I did not and will not make the raw data available to anyone else.

Read more at: http://ieeelog.com/

http://static.squarespace.com/static.../?format=1500w

All compromised IEEE members plotted on the World map. (IP geolocation)

Not good news at all....
26-09-2012, 03:10 PM
Recursion

Really, I'd have expected better of IEEE, but for some reason this doesn't surprise me AT ALL.
26-09-2012, 03:53 PM
Tomm

I just don't understand why anyone would decide to store passwords in plaintext or co-operate with someone who wanted to do so, you'd have to be absolutely stupid to do so and definitely not fit to work in any fields remotely related to security.
26-09-2012, 09:02 PM
Agnostic Bear

I get less and less surprised the more this happens. It's like they don't even care about security anymore.
26-09-2012, 09:09 PM
Futz

why were they stored in plain ******* text wat are you doing ieee
30-09-2012, 11:06 PM
HotelUser

Quote:

Originally Posted by Futz

why were they stored in plain ******* text wat are you doing ieee

Because they neglected to attend their first CS class in University where the very first thing you learn is to not be stupid and store passwords insecurely.