| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
New Security Breach Threatens Net | |
|
||
| Time: 18:10 EST/23:10 GMT | News Source: Internet News | Posted By: Matthew Sabean | ||
|
An Arizona credit card processing company has warned its customers about a security breach caused by hackers that might allow its customers' Web server computers to be used in a DoS attack on other computers. The company, Credit Card Billing LLC (CCBill) of Tempe, Ariz., reportedly advised its customers to change their passwords and search for bots called "eggdrop" that are designed to listen for instructions via an IRC channel, according to a Reuters report. Once activated, the bots could swing into action, turning hacked Web servers into zombie-like drones that could be used to take down other Web sites. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 155 Last | Next |
The time now is
11:16:37 AM
ET.
Any comment problems? E-mail us |
| #1 By 40 (216.68.162.106) at 12/21/2001 11:08:39 PM |
| What a joke, they are blaming eggdrop bots. That is like blaming perl for the security holes on a web server, eggdrop is just on of the bot programs, that are script files, normal used to keep a irc channel open, and protect it from being hijacked. They can also be useful for offering up files, ( rules, faq, scripts, and yes some even offer warzes), but these are nothing old, and eggdrop bots have been around for a while. The funny part about this is that it is just in time for the 'Big events', several major hacking/worms/virus unleashed on the internet and to the world. Another funny thing is that i used to run a eggdrop bot, to protect me when I was online, from the hackers and it worked well. |
| #2 By 135 (208.50.201.48) at 12/22/2001 1:44:31 PM |
|
Well so much for the myth of Linux security. So much for the myth of your CC is secure if you leave it on 50 different servers instead of just Passport.
|
| #3 By 135 (208.50.201.48) at 12/22/2001 8:20:16 PM |
|
#11 - "Just had CCBill's bad security. "
Exactly. "And each CCbill server was for a client who had there own websites, it wasn't a central database of information. " It doesn't matter, and that's the bloody point. CCBill obviously does not have the knowledge, experience, or expertise to be running a service that utilizes credit card information. Because of their stupidity they left the door open. By leaving the door open they allowed not only their servers to be compromised, but all the servers of their customers. You whine about a central server, and yet you allow this kind of dangerous situation to go on unquestioned. If you want to talk about security, educate yourself. |
| #4 By 135 (208.50.201.48) at 12/23/2001 12:30:44 AM |
|
#14 - "Not on there setup. decentralized would have been more secure if the userid's and password's didn't get compromised. "
How is Decentralized any more secure than Centralized? Obviously nothing is secure if the passwords are compromised. Duh! Thanks for playing, troll. It's also most certainly easier to protect one set of passwords in the hands of a single person than 50 sets of passwords in the hands of hundreds of individuals. "From your arguement its pretty clear you don't understand a thing about security, you are just repeating some junk with no clear techincal explantion one way or the other. " Or rather, you don't understand what I'm talking about because it's over your head. |
| #5 By 135 (208.50.201.48) at 12/23/2001 3:16:04 AM |
|
#17 - "I'm afraid your lack of understanding of security shows."
Your response does not apply to security, but rather the consequences of having an unsecured asset compromised. Single point of failure is also an issue with system reliability, but again not with security. If you pull your assets together you can more easily protect them with fewer resources. Why do you think the US gold supply is housed at Fort Knox instead of 50 such facilities, one in each state? Especially given the 50 such facilities you keep advocating, such as the CC Bill example here don't have any security measures put in place at all. The assets could be missing for months(as in this case) with nobody noticing. And you are saying this is somehow more secure? Yep, I feel a lot better not knowing if my credit card has been in the hands of crooks for the past 9 months. Your argument would only be remotely valid if we could be assured that the 50 disparate systems would have security in place at a minimum as good as that which Microsoft puts in place for Passport. Unfortunately there are two problems. It's not 50 systems, it's more like 50,000. Secondly, we know that most of these have no security at all or easily breakable security, as evidenced again by this CC Bill example as well as past examples such as CD Universe, Playboy.com, Creditcards.com and so on. A new example proving you don't understand the issues appears weekly. All I can say is Thank God American Express offers Private Payments to protect me from your idea of "security." |
|
Write Comment
Return to News |
Displaying 1 through 25 of 155 Last | Next |
The time now is
11:16:37 AM
ET.
Any comment problems? E-mail us |
