News for hackers. Stuff that matters.

A comment on Linode hacked again?.

Re:Linode hacked again? by mapunk on Sunday January 19, 2014 @02:01PM (#7085476)
It looks like this is the same password from the last hack. Did they really not change their passwords?
[ Parent | on HN ]
Re:Linode hacked again? by infosecslave on Sunday January 19, 2014 @02:08PM (#7085503)
Same mysql server also appeared to accept * as the password for the root user.
[ Parent | on HN ]
Re:Linode hacked again? by eli on Sunday January 19, 2014 @02:23PM (#7085567)
That doesn't really make any sense. That's not a MySQL default, so you're saying they intentionally set the root user password to '*'? I'm not sure I buy that.
[ Parent | on HN ]
Re:Linode hacked again? by infosecslave on Sunday January 19, 2014 @03:00PM (#7085723)
They're also running MySQL 3.
[ Parent | on HN ]
Re:Linode hacked again? by eli on Sunday January 19, 2014 @03:17PM (#7085806)
Be that as it may, I'm pretty sure I've been using MySQL since version 3 and I don't recall '*' ever working as a password.
[ Parent | on HN ]