bugtraq - Re: Motorola Timbuktu's Internet Locator Service real-time data exposed to public.

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-Id: <200810091604.m99G42Io031813@www5.securityfocus.com>
Date: Thu, 9 Oct 2008 10:04:02 -0600
From: therese.vanryne@...orola.com
To: bugtraq@...urityfocus.com
Subject: Re: Motorola Timbuktu's Internet Locator Service real-time data
 exposed to public.

Thank you for revisiting this issue. Unfortunately your first message didn't make it to the right parties due to the then-recent acquisition of Netopia by Motorola. 

We take security seriously and have added in password protection to fix this problem. We are also investigating the root cause of the underlying issue. 

It is important to note that non-Timbuktu users who might read this warning understand that sharing this information is, in fact, the purpose of the IP locator service.  Timbuktu users may choose, voluntarily, to participate in this service as a way of making it easier for other Timbuktu users to find them.