The Insecurity of Chocolate

Iria · Apr 16, 2008, 04:45 PM

A report released Wednesday by Infosecurity Europe revealed that not only is chocolate good bait for getting someone's password, so is an attractive appearance.
___________
Source: Tech-Ex

Al_Vampyre · Apr 16, 2008, 04:46 PM

Yep....works for me everytime...dip me in chocolate and throw me to the lesbians!

Matth · Apr 16, 2008, 08:31 PM

"The Real Hustle", a programme that highlights the many ways you can be taken for a ride, used a fake employment agency (an office hired by the day) to extract incredible amounts of data, and found it was common for people to use the same PIN as their cards when asked to choose a PIN.

Only in low-security domains, should you ever use a common PIN or password for more than one. For example, if you use the same username AND paswword on several forums, you risk an account hijack on all if you somehow get hacked (did happen on forum, the database got hacked). Use the same details on anything more critical, and you have provided what would be known in computing as a "priviliege escalation exploit", where a relatively minor access can be used to gain greater control.

Apr 16, 2008, 04:45 PM	#1
Iria DriverHeaven Extreme Member Join Date: Apr 2004 Posts: 7,275 Rep Power: 89	The Insecurity of Chocolate A report released Wednesday by Infosecurity Europe revealed that not only is chocolate good bait for getting someone's password, so is an attractive appearance. ___________ Source: Tech-Ex

Apr 16, 2008, 04:46 PM	#2
Al_Vampyre HardwareHeaven Senior Member Join Date: Jan 2003 Location: Scotland Posts: 1,532 Rep Power: 72 System Specs	Yep....works for me everytime...dip me in chocolate and throw me to the lesbians! __________________ "Knowledge is knowing that a tomato is a fruit; wisdom is knowing not to put it in a fruit salad" - Brian O'Driscoll - Ireland Rugby Team 2009 Grand Slam winning Captain.

Apr 16, 2008, 08:31 PM	#3
Matth Flash Banner Hater Join Date: Jun 2002 Location: UK Posts: 3,426 Rep Power: 93 System Specs	"The Real Hustle", a programme that highlights the many ways you can be taken for a ride, used a fake employment agency (an office hired by the day) to extract incredible amounts of data, and found it was common for people to use the same PIN as their cards when asked to choose a PIN. Only in low-security domains, should you ever use a common PIN or password for more than one. For example, if you use the same username AND paswword on several forums, you risk an account hijack on all if you somehow get hacked (did happen on forum, the database got hacked). Use the same details on anything more critical, and you have provided what would be known in computing as a "priviliege escalation exploit", where a relatively minor access can be used to gain greater control. __________________ Mary had a little lamb, Her father shot it dead Now Mary takes her lamb to school, Between two crusts of bread