The crazy thing is they were a new dot com so I would think legacy mainframes would have been at a minimum. Add to that the ability to ruin someone’s life financially and it was pretty shocking.
From: Ziots, Edward [mailto:[email protected]] Sent: Tuesday, December 11, 2012 1:54 PM To: NT System Admin Issues Subject: RE: -1) All your passwords are belong to us Yep, my point exactly, Z Edward E. Ziots, CISSP, Security +, Network + Security Engineer Lifespan Organization [email protected]<mailto:[email protected]> From: Crawford, Scott [mailto:[email protected]] Sent: Tuesday, December 11, 2012 12:27 PM To: NT System Admin Issues Subject: RE: -1) All your passwords are belong to us For quite a while ETrade was limited to 6 characters. From: Ziots, Edward [mailto:[email protected]] Sent: Tuesday, December 11, 2012 10:38 AM To: NT System Admin Issues Subject: RE: -1) All your passwords are belong to us And I have seen applications that are financially based can fields can’t hold special characters, or numbers or sometimes more than 8 characters total (Poor development model and background data model) Z Edward E. Ziots, CISSP, Security +, Network + Security Engineer Lifespan Organization [email protected]<mailto:[email protected]> From: MMF [mailto:[email protected]] Sent: Tuesday, December 11, 2012 11:17 AM To: NT System Admin Issues Subject: Re: -1) All your passwords are belong to us The real problem as I see it is that some organizations ignore case sensitivity, and some do not allow special characters. I won’t name the companies that I’m aware of in the investment and finance industries, but I know for a fact that they don’t care if your password is case sensitive, they will accept upper or lower case for an individual letter. M. Free From: Jonathan Link<mailto:[email protected]> Sent: Tuesday, December 11, 2012 12:39 AM To: NT System Admin Issues<mailto:[email protected]> Subject: Re: (SCL: -1) All your passwords are belong to us 8 characters not including common names/words? On Tue, Dec 11, 2012 at 1:34 AM, HELP_PC <[email protected]<mailto:[email protected]>> wrote: They are talking about 8 chars pwd I use 12+ chars (Aa+numbers+special chars ) since many years Guido Elia HELPPC - HELPPC SERVICE ________________________________ Da: Stefan Jafs [mailto:[email protected]<mailto:[email protected]>] Inviato: lunedì 10 dicembre 2012 19.55 A: NT System Admin Issues Oggetto: (SCL: -1) All your passwords are belong to us I don't know if you have seen this: http://arstechnica.com/security/2012/12/25-gpu-cluster-cracks-every-standard-windows-password-in-6-hours/ -- Stefan Jafs ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
