Have you heard that Unix co-founder Ken Thompson's 39-year old BSD password has finally been cracked? Learn more in an interesting The Hacker News article: . A 39-year-old login password ofKen Thompson, the co-creator of the UNIX operating system among, has finally been cracked that belongs to a BSD-based system, one of the original versions of UNIX, which was back then used by various computer science pioneers. In 2014, developer Leah Neukirchen spotted an interesting " /etc/passwd " file in a publicly available source tree of historian BSD version 3, which includes hashed passwords belonging to more than two dozens Unix luminaries who worked on UNIX development, including Dennis Ritchie, Stephen R. Bourne, Ken Thompson, Eric Schmidt, Stuart Feldman, and Brian W. Kernighan. Since all passwords in that list are protected using now-depreciated DES-based crypt(3) algorithm and limited to at most 8 characters, Neukirchen decided to brute-force them for fun and successfully cracked passwords (listed below) for almost everyone using password cracking tools like John the Ripper and hashcat. The link for this article located at The Hacker News is no longer available. . A 39-year-old access code belonging to Ken Thompson, one of the architects of the UNIX operating system, has been deciphered.. Ken Thompson, UNIX Prominence, Password Cracking Insights. . LinuxSecurity.com Team
DreamHost, a Los Angeles-based web hosting services provider and domain name registrar, has confirmed that it may have been the victim of an attack on its servers. In a post on its DreamHost Status blog, the company says that it "detected some unauthorized activity" in one of its databases and is now requiring customers to change their FTP/shell passwords as a precautionary measure.. In an email to its customers, DreamHost notes that, of the three different types of passwords used for accessing the web panel and email, and for FTP/Shell access, only the latter appears to have been compromised in the breach. Web panel and email passwords as well as billing information are not affected and were reportedly not accessed. The link for this article located at H Security is no longer available. . DreamHost alerts users about a security incident impacting FTP credentials, recommending immediate password updates.. DreamHost Security, FTP Security, Password Breach. . LinuxSecurity.com Team
A hacker was able to break into the database of RockYou and obtain 32 million clear-text passwords through an SQL vulnerability. Researchers at database security firm Imperva discovered the flaw in RockYou.com, which provides applications and services for social networking sites like Facebook and MySpace. . Imperva notified the site then issued a warning about the flaw, Amichai Shulman, CTO of Imperva, told SCMagazineUS.com on Tuesday. But before RockYou could fix the bug, at least one hacker, using the alias The link for this article located at SC Magazine is no longer available. . Imperva notified the site then issued a warning about the flaw, Amichai Shulman, CTO of Imperva, tol. hacker, break, database, rockyou, obtain, million, clear-text, passwords. . LinuxSecurity.com Team
An online credit card processing company grudgingly admitted Thursday that a cache of passwords apparently stolen from its own system has resulted in hacker break-ins at hundreds - maybe thousands - of other servers across the Net. And some Internet . . . . An online credit card processing company grudgingly admitted Thursday that a cache of passwords apparently stolen from its own system has resulted in hacker break-ins at hundreds - maybe thousands - of other servers across the Net. And some Internet service providers (ISPs) are angry that it took CCBill of Tempe, Ariz., nearly three days to finally admit to customers that there may be a security problem, despite substantial evidence that its clients appeared uniquely vulnerable to the rash of system break-ins first uncovered Monday. Dayne Jordan, a partner at Columbus, Ohio, Web-hosting company CompleteWeb, said attackers appear to have wielded the user IDs and passwords of legitimate ISP customers to enter Unix-flavored servers and install software capable of logging on to an Internet relay chat (IRC) channel to await further commands. Similar IRC-controlled "bots" have been used in the past to command small armies of zombie computers in distributed denial-of-service (DDoS) attacks. The link for this article located at Newsbytes is no longer available. . A digital payment gateway company reported that compromised passwords resulted in unauthorized access to their servers and increased vulnerability to DDoS attacks affecting their clientele.. Password Theft, Server Compromise, DDoS Attack, Security Threat. . LinuxSecurity.com Team
A new way to attack wireless networks underscores the lack of security for PC owners using the airwaves to connect their computers, said security experts speaking at the Black Hat Briefings conference. On Thursday, Tim Newsham, a researcher for security . . . . A new way to attack wireless networks underscores the lack of security for PC owners using the airwaves to connect their computers, said security experts speaking at the Black Hat Briefings conference. On Thursday, Tim Newsham, a researcher for security firm @Stake, presented the details of weaknesses in the password system of wireless networks that could lead to a break in security in less than 30 seconds. The flaw is the third to be uncovered in the so-called Wired Equivalent Privacy, or WEP, protocol that supposedly secures wireless networks. Newer 128-bit wireless LAN (local area network) cards are fairly strong. But poorly chosen passwords can still be cracked with an old technique known as a dictionary attack: Using a list of common passwords and a dictionary of words, the potential intruder can try various combinations until the password is broken. The link for this article located at CNet is no longer available. . Emerging vulnerabilities in wireless communications reveal serious safety concerns for computer users depending on WPA security measures.. Wireless Security, WEP Protocol, Network Risks, Password Security, Cyber Threats. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.