News for hackers. Stuff that matters.

A comment on Leak of Multiple University Databases.

Re:Leak of Multiple University Databases by rozap on Tuesday October 02, 2012 @04:05PM (#4603966)
Looks like they went for the low hanging fruit. At my university, I only see wordpress and other massively popular PHP tools. Script kiddies are at it again.

Though, there was one database (at my school) with the passwords in plaintext. Why do people use plain text for passwords. Why.

[ Parent | on HN ]
Re:Leak of Multiple University Databases by jmediast on Tuesday October 02, 2012 @05:49PM (#4604561)
If it's anything like ours, they don't like to touch systems that 'work'... They don't have the resources to audit, update, and re-train everyone to use the current version.

Then there are the students hired to build internal tools who wouldn't know SHA1 from Bcrypt/Scrypt...

[ Parent | on HN ]