Full Disclosure mailing list archives

Re: Nobody is suppose to learn from DPI's mistake


From: Georgi Guninski <guninski () guninski com>
Date: Tue, 25 Feb 2003 17:23:47 +0200

Richard M. Smith wrote:
http://www.eweek.com/print_article/0,3668,a=37418,00.asp

Data Processors International Inc., a credit card transaction processing
firm, confirmed Wednesday that its customer databases have been hacked
by "an unauthorized outside party" and that it remains unclear whether
hackers nabbed useable data, according to a company spokesman.
The Secret Service and the FBI advised DPI against speaking publicly
about such issues as which vendor's or vendors' databases were targeted.
Citing customer confidentiality, spokeswomen for the three major
database vendors-Microsoft Corp., Oracle Corp. and IBM-said that it was
unlikely that they would state whether DPI runs its business on their
respective databases. They had not responded to requests to identify DPI
as a customer by the time this story went to press.


According to netcraft -
http://uptime.netcraft.com/up/graph/?mode_u=off&mode_w=on&site=www.dpicorp.com&submit=Examine

www.dpicorp.com are using IIS5.0 on windoze and have used for a long time IIS4.0 on NT/98.

Georgi Guninski
http://www.guninski.com


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: