UMKC Hacked!

[Leo J Mauler]

On Wed, 14 Jan 2004 06:48:21 -0600 "Jeffrey Cady" <jcld at scarlett.com>
writes:
> On Mon, 12 Jan 2004 08:10:51 -0600 "Charles, Joshua Micah 
> (UMKC-Student)"
> <jmcqk6 at umkc.edu> writes:
> > Got to work on campus this morning and faced another harsh 
> > reality of  Microsoft technology.  Over the weekend, somebody 
> > hacked into the servers, and EVERYONES password was 
> > compromised.  Hmm, it will be interesting to discover if any 
> > lawsuits come out of this one.
> 
> > Microsoft will just blame the proprietary hardware manufacturer, 
> > and the proprietary hardware manufacturer will blame Microsoft.
> 
> > And since no one gets to look at the Microsoft source code, 
> > no one will ever know which one of them is right.
> 
> Wasn't the problem that a Sysadmin had a weak password that 
> was cracked or the password was discovered some other way? 
> Why would this be a Microsoft or Hardware problem. Isn't it a 
> human error?

I wrote that E-mail back when we didn't know all the details.

Yes, now its a human error.

Of course, something like the "john" package I discovered in the Debian
installer CDs would have been helpful to prevent that.  "John" is run by
the sysadmin, and it tries to crack user passwords and sends warning
emails to the sysadmin about users with easily-cracked passwords.   

Granted, the sysadmin was the weakest link, but still...   :)

________________________________________________________________
The best thing to hit the internet in years - Juno SpeedBand!
Surf the web up to FIVE TIMES FASTER!
Only $14.95/ month - visit www.juno.com to sign up today!