What is the Worst Computer Security you have seen?

[beakmyn]

Re: What is the Worst Computer Security you have seen?

That's true. I'm new to the hacking thing, which is why I'm here, and I haven't had time to try out Switchblade and Hacksaw yet. From what I've read though, you're probably right. Tons of information goes over that network, and I'm sure those would work over the whole system pretty good. Pretty certain we'd be screwed...

Where was it you worked again? I'm kidding, I don't want to know.

I always like masking tape security. You know the admin password on a piece of tape under the keyboard.

[barry99705]

Re: What is the Worst Computer Security you have seen?

Where was it you worked again? I'm kidding, I don't want to know.

I always like masking tape security. You know the admin password on a piece of tape under the keyboard.

Under the keyboard? Hell, I've found it laminated to the top of the desk!!

[xor]

Re: What is the Worst Computer Security you have seen?

Kwame Kilpatrick's cell phone. Will people ever learn..... Wire or OTA != Secret

xor

[astcell]

Re: What is the Worst Computer Security you have seen?

Worst security? it happened to me yesterday. I was unable to logon to my bank, it said that the credentials give (my password) and not sufficient to verify my identity, and to call them.

So I did. They were closed. M-F, 9-6 only. So I call at 10am. After a phone tree from hell, lousy music, and a few clicks, I get an operator who wants all this info I need to dig up like my ATM card number and stuff.

Then she wants my last 4 of my social, then last 4 of my license. Then my mother's maiden name, last deposit I made, last check I wrote, and so on. I cannot even ask a question because verifying me is of urgent concern. Funny, if it was that urgent they would be open at 3am when they locked me out of my account.

Now she says she is happy I am me, so she is deleting my online profile and passowrd and I need to pick a new one, for security. This completely horks up my Quicken accounting program as you cannot update your customer ID once an account is made. And of course since this is a completely new account and password, I write it down on a a stickie so I can remember it. Gah.

Now I get to talk. WHAT'S THE PROBLEM! Well she says, they noticed an attempted logon to my account from the IP address belonging to theplanet.com back on January 13th.

I'm stunned.

First off, 1/13 was a little while ago. I logon daily. Why did this supposed breach take over 60 days to detect? Second, what if it was me? I use ghostsurf and also run firefox off of an ironkey. Who knows what IP I will puport to be at any day of the week.

This is security?

[Suriyawong]

Re: What is the Worst Computer Security you have seen?

At least they verified who you were, though finding a breach that long after it occurred is a little bit disconcerting. I bet if there was a breach in my banking system it would be the same though. Small town banks probably don't have the kind of security that a big bank would. I know one of the IT guys at my bank though, used to teach at my high school. I guess that he might be on top of that kind of thing... at least they do have some security, the kind that locks you out after X attempts at login. I'll have to ask him what other types of security they use with that system to find out if something like this could happen to me too...

[barry99705]

Re: What is the Worst Computer Security you have seen?

I'm really not sure if you'd call this "bad security" or not. This guy was part of a military FOB network. Not too worried about it now as it was six years ago and the place doesn't exist any more. Any way, it sat in our break/ready room by the flightline, under the table with the coffee maker...

Linky thingy.

[starski]

Re: What is the Worst Computer Security you have seen?

I think in most places I've been. Malls, schools and even some government places. If anybody will conduct an audit, well I know some profitable places. Like here in Qatar, most establishment didn't recognized the importance of network security, some still uses wep encrypted network and some are worse, without any kind of protection. A perfect place for script kiddies to practice their little technical know how. Well, still I couldn't figure why those businesses invested a lot on up to date hardware stuff and yet haven't configure on maximum protection and compromising their security and operations.