[132828] in cryptography@c2.net mail archive

home help back first fref pref prev next nref lref last post

Student hacker exposes Carleton U cash, ID card security holes

daemon@ATHENA.MIT.EDU (rgb)
Tue Sep 9 09:13:14 2008

Date: Mon, 8 Sep 2008 23:33:24 -0400
From: rgb <rgb@tricolour.net>
To: cryptography@metzdowd.com

Student hacker exposes Carleton U cash, ID card security holes

http://www.cbc.ca/canada/ottawa/story/2008/09/08/ot-security-080908.html

"A Carleton University student has revealed that he stole data containing
e-mail passwords, financial data and library account information from 32
students at the university in order to expose security holes in the system.

The card's design for both financial and identification purposes and its
"inadequate safeguards against information leakage" could lead to identity or
financial fraud, said the 20-year-old student of the Ottawa university in a
document e-mailed to the victims Sunday evening under the alias Kasper
Holmberg."

...

There's a few inconsistencies in this story, first claiming that this student
is from one university in Ottawa, Ontario, then the other, except that Ottawa
University is in Ottawa, Kansas while the University of Ottawa is in Ottawa,
Ontario.  CBC should have been able to get those mundane details right so who
knows about the other details...

As usual, the institution involved missed the point...

	slainte mhath, RGB

-- 
Richard Guy Briggs               --  ~\    -- ~\            <hpv.tricolour.net>
<www.TriColour.net>                --  \___   o \@       @       Ride yer bike!
Ottawa, ON, CANADA                  --  Lo_>__M__\\/\%__\\/\%
Vote! -- <greenparty.ca>_____GTVS6#790__(*)__(*)________(*)(*)_________________

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo@metzdowd.com

home help back first fref pref prev next nref lref last post