funsec mailing list archives

Adobe: Important Customer Security Announcement


From: Jeffrey Walton <noloader () gmail com>
Date: Thu, 3 Oct 2013 18:15:50 -0400

Sigh....

It would be nice if there was a full accounting of what precisely was
egressed. I wonder if the key to the data was egressed from the file
system with the rest of the data. Or maybe the bad guy decrypted the
data first before egress.

http://blogs.adobe.com/conversations/2013/10/important-customer-security-announcement.html

... Our investigation currently indicates that the attackers accessed
Adobe customer IDs and encrypted passwords on our systems. We also
believe the attackers removed from our systems certain information
relating to 2.9 million Adobe customers, including customer names,
encrypted credit or debit card numbers, expiration dates, and other
information relating to customer orders....
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: