full-disclosure - Nobody is suppose to learn from DPI's mistake

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <002a01c2dc5b$6bc459c0$6601a8c0@rms2>
From: rms at computerbytesman.com (Richard M. Smith)
Subject: Nobody is suppose to learn from DPI's mistake

http://www.eweek.com/print_article/0,3668,a=37418,00.asp

Data Processors International Inc., a credit card transaction processing
firm, confirmed Wednesday that its customer databases have been hacked
by "an unauthorized outside party" and that it remains unclear whether
hackers nabbed useable data, according to a company spokesman. 

The Secret Service and the FBI advised DPI against speaking publicly
about such issues as which vendor's or vendors' databases were targeted.
Citing customer confidentiality, spokeswomen for the three major
database vendors-Microsoft Corp., Oracle Corp. and IBM-said that it was
unlikely that they would state whether DPI runs its business on their
respective databases. They had not responded to requests to identify DPI
as a customer by the time this story went to press.