full-disclosure - Nobody is suppose to learn from DPI's mistake

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: guninski at guninski.com (Georgi Guninski)
Subject: Nobody is suppose to learn from DPI's mistake

Richard M. Smith wrote:
> http://www.eweek.com/print_article/0,3668,a=37418,00.asp
> 
> Data Processors International Inc., a credit card transaction processing
> firm, confirmed Wednesday that its customer databases have been hacked
> by "an unauthorized outside party" and that it remains unclear whether
> hackers nabbed useable data, according to a company spokesman. 
> 
> The Secret Service and the FBI advised DPI against speaking publicly
> about such issues as which vendor's or vendors' databases were targeted.
> Citing customer confidentiality, spokeswomen for the three major
> database vendors-Microsoft Corp., Oracle Corp. and IBM-said that it was
> unlikely that they would state whether DPI runs its business on their
> respective databases. They had not responded to requests to identify DPI
> as a customer by the time this story went to press. 


According to netcraft -
http://uptime.netcraft.com/up/graph/?mode_u=off&mode_w=on&site=www.dpicorp.com&submit=Examine

www.dpicorp.com are using IIS5.0 on windoze and have used for a long time IIS4.0 
  on NT/98.

Georgi Guninski
http://www.guninski.com