No public acknowledgment of the leak offered

The Institute of Electrical and Electronics Engineers (IEEE) reportedly made a massive mistake that left nearly 100,000 usernames and passwords of members of the organization exposed on a public server. A plain text list of username and password combinations was publicly available on a FTP server for over a month before being discovered. The plain text list was discovered last week by teaching assistant in the computer science department at the University of Copenhagen. 
Considering the huge number of technology experts who are members of the IEEE and who work for the organization, this is a massive and hugely embarrassing security fault. The usernames and passwords of members weren't the only pieces of information exposed on the publicly accessible FTP site. In addition, over 100 GB of Web server log files from and were publicly available because server administrators hadn't set access controls.
Those logs reportedly showed 376 million HTTP requests and 411,308 of those included both usernames and passwords. ZDNet reports that most of the compromised accounts belonged to employees at Apple, Google, IBM, Oracle, and Samsung. However, some of the user names and passwords exposed also belong to researchers from NASA, Stanford University, and other universities and organizations.
ZDNet reports that the IEEE has yet to publicly admit the data was leaked and hasn't been returning calls for comment. Teaching assistant Radu Dragusin said, "One simple and stupid mistake: public access to logs. The other, more troublesome, keeping passwords in plain text, which seems to be more on how they architect their login system." He also noted that, "While the first issue [log files] is clearly solved, I doubt the second is."

Source: ZDNet

"Vista runs on Atom ... It's just no one uses it". -- Intel CEO Paul Otellini

Most Popular ArticlesASRock Z370 Killer – Powerful VR Ready Motherboard
November 30, 2017, 7:15 AM
Comcast xFi Advanced Gateway Modem/Router
December 6, 2017, 6:30 AM
OnePlus 5T - Star Wars Limited Edition
December 3, 2017, 6:35 AM
Harman Kardon – Home Speaker with Cortana
December 5, 2017, 5:55 AM
Samsung Galaxy A8+ - Leaked Images Online
December 2, 2017, 9:20 AM

Copyright 2017 DailyTech LLC. - RSS Feed | Advertise | About Us | Ethics | FAQ | Terms, Conditions & Privacy Information | Kristopher Kubicki