If you can read this, either the style sheet didn't load or you have an older browser that doesn't support style sheets. Try clearing your browser cache and refreshing the page.

(WBAL-TV Baltimore)   Hackers thwarted by University of Maryland's improved security measures. Just kidding, they got hacked again   (wbaltv.com) divider line 17
    More: Amusing, University of Maryland  
•       •       •

1366 clicks; posted to Geek » on 21 Mar 2014 at 4:57 PM (38 weeks ago)   |  Favorite    |   share:  Share on Twitter share via Email Share on Facebook   more»



17 Comments   (+0 »)
   
View Voting Results: Smartest and Funniest
 
ZAZ [TotalFark]
2014-03-21 05:06:50 PM  
Wylie said the breach resulted in the release of personal data about one senior university official. She didn't say whether other people had their data stolen.

= Somebody guessed the president's email password?
 
2014-03-21 05:15:12 PM  

ZAZ: Wylie said the breach resulted in the release of personal data about one senior university official. She didn't say whether other people had their data stolen.

= Somebody guessed the president's email password?


Based on the radio interviews about the first hack, it definitely sounds like an inside job. No doubt some students feel like messing around.
 
2014-03-21 05:43:10 PM  
"ATTN:  We had a data breach.  For your own personal security, we have reset all of the passwords associated with the leaked accounts."
*uses same password*
 
2014-03-21 05:58:28 PM  
i.imgur.com
 
2014-03-21 06:08:21 PM  
I got a letter from them today offering credit monitoring, etc.
I worked at UMd from 2001-2002... wtf, mate. That seems like an awfully long time to be keeping my personal information on your servers.
 
2014-03-21 06:52:47 PM  

INeedAName: ZAZ: Wylie said the breach resulted in the release of personal data about one senior university official. She didn't say whether other people had their data stolen.

= Somebody guessed the president's email password?

Based on the radio interviews about the first hack, it definitely sounds like an inside job. No doubt some students feel like messing around.


Of course, college networks are considered a high-risk web environment security-wise.

Not to worry though, the UofM took down some websites. Lol, that should result in beefy security.
 
ZAZ [TotalFark]
2014-03-21 06:54:35 PM  
melopene

I got a letter related to my summer job in college 25 years earlier. My former employer lost a tape with my data on it. They sent a notification letter to my old address which hadn't been valid for over 20 years. My father still lives in the same town. The post office put it in his mailbox. He forwarded it to me.
 
2014-03-21 07:31:25 PM  
Roland: One.
Dark Helmet: One.
Colonel Sandurz: One.
Roland: Two.
Dark Helmet: Two.
Colonel Sandurz: Two.
Roland: Three.
Dark Helmet: Three.
Colonel Sandurz: Three.
Roland: Four.
Dark Helmet: Four.
Colonel Sandurz: Four.
Roland: Five.
Dark Helmet: Five.
Colonel Sandurz: Five.
Dark Helmet: So the combination is... one, two, three, four, five? That's the stupidest combination I've ever heard in my life! That's the kind of thing an idiot would have on his luggage!
 
2014-03-21 07:46:12 PM  

DeathByGeekSquad: "ATTN:  We had a data breach.  For your own personal security, we have reset all of the passwords associated with the leaked accounts."
*uses same password*


You laugh, but HR at the college I worked at did something like that a few years ago. They worked out a deal to set up contributions pulled straight from your paycheck and all you need to know was the password, which was the same for everyone and the username of the employee, which in our case is the first part of your email address.

I couldn't believe it when I read the email about it so I called them and I had to talk to three different people before I could convince them that this was a bad idea. (What worked was the example of taking money out of their paycheck)
 
2014-03-21 08:09:03 PM  
I'm not surprised.
I worked for their police department when I was in college and their passwords were on the level of password.
 
2014-03-21 09:48:41 PM  
Hard to believe they keep getting hacked. Look at the CIOs stellar credentials!

http://www.geol.umd.edu/directory.php?id=22

I bet she's a wiz at PowerPoint!
 
2014-03-21 10:10:18 PM  

melopene: I got a letter from them today offering credit monitoring, etc.
I worked at UMd from 2001-2002... wtf, mate. That seems like an awfully long time to be keeping my personal information on your servers.

1997 here, so I'm even more "WTF?" than you. I also got my letter today.

You know, I'm starting to think that we're wasting our time on laws protecting data security and requiring notification of breaches. We need to make the data useless. The next company that hires someone using a fake SSN or opens credit for someone that fills out their application in crayon should have their execs fired out of cannons on national TV. That will put a stop to the use of stolen data really fast and no one will bother stealing data if it has no value.
 
2014-03-21 10:37:27 PM  

labman: DeathByGeekSquad: "ATTN:  We had a data breach.  For your own personal security, we have reset all of the passwords associated with the leaked accounts."
*uses same password*

You laugh, but HR at the college I worked at did something like that a few years ago. They worked out a deal to set up contributions pulled straight from your paycheck and all you need to know was the password, which was the same for everyone and the username of the employee, which in our case is the first part of your email address.

I couldn't believe it when I read the email about it so I called them and I had to talk to three different people before I could convince them that this was a bad idea. (What worked was the example of taking money out of their paycheck)


Oh, I was giving a plausible scenario, not getting snarky.  I fully expect some herpyderp to reuse the same password after a breach and then have someone testing that breach gain access post-reset.
 
2014-03-21 10:42:55 PM  

CygnusDarius: Roland: One.
Dark Helmet: One.
Colonel Sandurz: One.
Roland: Two.
Dark Helmet: Two.
Colonel Sandurz: Two.
Roland: Three.
Dark Helmet: Three.
Colonel Sandurz: Three.
Roland: Four.
Dark Helmet: Four.
Colonel Sandurz: Four.
Roland: Five.
Dark Helmet: Five.
Colonel Sandurz: Five.
Dark Helmet: So the combination is... one, two, three, four, five? That's the stupidest combination I've ever heard in my life! That's the kind of thing an idiot would have on his luggage!


Scroob: Change the code on my luggage.
 
2014-03-21 11:51:00 PM  
She said the school has taken down a number of university websites to beef up their security.

That explains alot... "We deleted index.html, the server should have been safe!"
 
2014-03-22 02:53:37 PM  
That's because the  l33t haxxor won't go to work in IT at university.
 
2014-03-22 05:49:01 PM  
All I have to say is, WTF IS A PROFESSOR OF GEOLOGY DOING RUNNING A CAMPUS IT DEPARTMENT. Thats almost as bad as an Oncology Dept. manager running a hospital IT dept.

/and yes, one of my former bosses was an Oncology Dept. manager
 
Displayed 17 of 17 comments

View Voting Results: Smartest and Funniest


This thread is closed to new comments.

Continue Farking
Submit a Link »
On Twitter





In Other Media


Report