Click HERE to learn more about classes Adrien is teaching for SANS

Password != secure

Published: 2009-05-01. Last Updated: 2011-01-24 23:44:54 UTC
by Adrien de Beaupre (Version: 1)
1 comment(s)

Reading a story on how an attacker broke into the administrative interface to twitter was the following quote: "One of the admins has a yahoo account, i've reset the password by answering to the secret question. Then, in the mailbox, i have found her twitter password." Social engineering and good guessing trumps security every time. Twitter have confirmed the intrusion, so sad but true. No hacking necessary. I could probably rant for hours on the subject, but most of you know the story. Enough said.

Cheers,
Adrien de Beaupré
Intru-shun.ca Inc.

Keywords: twitter hack
1 comment(s)
Click HERE to learn more about classes Adrien is teaching for SANS

Comments

Yes, we know the story. And again, too much spending in security, and at the end the human factor is out of control by the policies!

Diary Archives