 | UT's security hole, or how NOT to design secure web pages |
Decent article covering some methods to prevent the class of hack of the UT database that m4dd4wg and Geek Austin wrote about last week.
Talk about a lame authentication system that was begging for a hack like this. I remember several years ago, when the infamous ASP "::$DATA" hack was around and you could get the source code for any ASP page (including MS's own home page), I saw some absolutely pitiful security on pages. But there's a few really simple morals from this that administrators of sensitive info systems should read.
It made me think of the Princeton hack of the Yale site -- but at least for that one you needed an SS, DOB and name. Nevertheless, all those are pretty easy to obtain about someone.
I've always been against organizations, especially schools, (ab)using SS #'s as a means of identification. Identity theft just gets a whole lot more easy once you know someone's SS, which was printed on my student card (which we had to keep on top of our desks at computer labs), assignments (often in piles at the front of classes), not to mention almost every piece of correspondence from the school.
While we're on the subject of identity theft, if you don't shred your mail that has personal details like SS#, or bank acct numbers, go and buy a shredder today. You can get a nice one for under $40.
I think identity theft is only one facet of my fears about large institutional databases. Using SSNs as universal identifiers increases the ability of governments - and businesses - to perform surveillance on common people without their awareness. One thing I do like about identity theft scares is it raises awareness among common people of how much surveillance businesses like credit reporting agencies and insurance companies perform with only a modicum of oversight. The terminology used in popular discussion of these issues seems to trivialize concerns too. Companies that keep track of your finances are "credit reporting" agencies, rather than "payment surveillance" agencies and concerned citizens are called "privacy advocates" rather than, say, "surveillance watchdogs." I wasn't terribly concerned about privacy until I started studying it in grad school, and I think part of it is the word "privacy" has some negative social connotation. I assume that privacy advocates are either paranoid or people who want to keep their kinky fetishes secret from their neighbors. With constantly improving data management and mining technologies governments and businesses have increasing power to follow our actions in ways that we are mostly unaware and tend not to enter public debate.
Posted by: m4dd4wg on March 14, 2003 06:28 PMWhere do you guys play?
Pacific Poker has treated me better than any other poker site so far.
First, they only allow one table open at a time, which means people play more hands because they get impatient.
Second, the microtournaments pay even money for placing 3/5 !
Looking for other suggestions for sites and what tables are good.
Posted by: Neil on December 15, 2004 03:35 PMgestion de contenu open source
Posted by: Lucas on December 6, 2005 02:24 PMClip xxx
Posted by: Ojiva on December 26, 2005 04:45 PMFilm video fun
Posted by: Jonas on December 26, 2005 06:48 PMsur paix , dessin humoristique astronomie , film dessin anime
Posted by: J.Road on December 27, 2005 10:35 AMrealisation dessin technique , lecon de dessin industriel , materiel
Posted by: lester on December 27, 2005 12:54 PMamatrice reelle gratuite amatrice x video clip el plus more partners
Posted by: ryanne on December 29, 2005 07:47 AMvideo gratis , vendome amateur photo
Posted by: agapita on December 29, 2005 08:23 AMjeu monopoly gratuit sur pc , jeu pc complet gratuit , jeu video
Posted by: jeromes on December 30, 2005 08:13 AMconsole portable sony , ecran veille anime gratuit laurent garnier
Posted by: holbrookkid on December 30, 2005 08:43 AMTestosterone explosion
Posted by: Luigi on December 30, 2005 06:21 PMFree photos in your mail
Posted by: Sercha on December 30, 2005 08:38 PMmp3 music free , transformer un fichier mp3 en audio
Posted by: yeferson on January 3, 2006 12:25 PMLogiciel de transformation de divx en dvd
Posted by: Noelia on January 3, 2006 05:39 PMvoir video x amateur , video amateur perso
Posted by: letrillo on January 6, 2006 05:23 AMvideo jeune africaine salope , jeune afrique cote ivoire
Posted by: piruchy on January 6, 2006 07:20 AMReal sex, real chics and hardcore amateur
Posted by: Caramuza on January 6, 2006 05:02 PMLive shows, webcam and chat with our girls
Posted by: Carlin on January 6, 2006 06:42 PMYoung city mmmmm...
Posted by: Troyano on January 9, 2006 08:36 PMphoto de femme amatrice de sexe , photo amatrice nu
Posted by: banchero on January 10, 2006 08:07 AMWeb cam free sex
Posted by: Ranua on January 10, 2006 01:45 PMUniversal games and fixings
Posted by: Insectum on January 13, 2006 04:21 PMOur best antivirus and service for your PC
Posted by: Augustus on January 13, 2006 07:01 PMlogiciel microsoft office 2000 premium , telecharger logiciel p2p gratuit
Posted by: marck on January 14, 2006 08:49 AMDownload the women more hot in the most provocative time exposures
Posted by: Ilumunatti on January 17, 2006 08:50 PMHi there everyone, D. Sanchez here to present...bigtitsroundasses.com
Posted by: stella on January 18, 2006 09:55 AMconvert mp3 wma , encodeur mp3 to wav , baladeur
Posted by: septimo on January 18, 2006 10:45 AMAccess to the best gif animated place of the web
Posted by: Episto on January 18, 2006 02:23 PMLuckily for all of you guys
Posted by: Fertum on January 19, 2006 12:36 PMAvid Ass Lovers BEWARE!
Posted by: Hipistes on January 19, 2006 02:53 PMDownload the codecs of DivX to see the best movies in DVD quality
Posted by: Decano on January 21, 2006 12:41 AMFree mp3 traditional world song and dance
Posted by: Kiulam on January 21, 2006 01:33 AMThis my friends..is what ass parade is all about!
Posted by: Zampler on January 23, 2006 09:15 PMYea, yeah, this is what I was talking about !!!
Posted by: Hermes on January 23, 2006 09:54 PMWe made this website because we love girls with big asses..
Posted by: malcom on January 24, 2006 06:37 AMwe couldn't find any good websites for this..
Posted by: maiden on January 24, 2006 07:06 AMonly get these girls to get completely naked for you
Posted by: marck on January 24, 2006 07:21 AMWe are 100% original and 100% new!
Posted by: alexio on January 24, 2006 07:57 AMThousands of videos x, of rapid discharge
Posted by: Enemy on January 25, 2006 02:53 PMThe biggest collection of girls in the whole network
Posted by: Perpetual on January 25, 2006 03:51 PMAlive shows, web cams and chatting with girls
Posted by: Dreams on January 25, 2006 04:36 PMReal girls, only amateur hardcore
Posted by: Forever on January 25, 2006 05:20 PMThe best explicit material about sex
Posted by: Remains on January 25, 2006 09:54 PMPhotos galleries, amateurs in action !!!
Posted by: Stronger on January 25, 2006 10:32 PMPrinters, Maintenance, Security, and Translation.
Posted by: Behay on January 29, 2006 01:41 AMdbpower amp music converter dmc , yahoo clip music , telechargement music now!!
Posted by: L. Teen on January 30, 2006 06:53 AMclassical music cover download free , daily music , absolut free..
Posted by: polired on January 30, 2006 07:36 AMclip music chaud censure , music maroc com , logiciel mixage music and much more!!
Posted by: korpus on January 30, 2006 07:54 AMkiwee telecharger , 0http www.arabmusic.us arabic music songs.asp
Posted by: dulcinea on January 30, 2006 08:13 AM