More T-Mobile Details 


Wired currently has an article that details what exactly was the fault of the T-Mobile system, at least for some of the crackers - a quite common application called WebLogic. In 2003, a vulnerability was found that would allow someone to read and write arbitrary files. A patch was immediately issued, but apparently no one at T-Mobile cared to actually apply it.

And so it goes. A cracker had access to complete customer records, SS numbers, the whole schmear, because someone didn't pay attention to patches coming from their vendors. This is probably a good indicator of the pervasiveness of this problem however. If a large company with a (presumably) huge IT department running their systems can miss this, I wonder how many more open systems there are out there. With your data on it. Just waiting to be cracked.
 

 

Posted: Mon - February 28, 2005 at 09:16 AM          


©