News for hackers. Stuff that matters.

A comment on Cardinals Face F.B.I. Inquiry in Hacking of Astros’ Network.

Re:Cardinals Face F.B.I. Inquiry in Hacking of Astros’ Network by netik on Tuesday June 16, 2015 @02:26PM (#9727792)
This really sounds like more of a "Astros suck at employee off-boarding" problem. They failed to lock out users of the previous system long after they left the company.

Regardless of their weak password storage scheme (which must be fixed), a simple set of changes (like disabling public access to their system, disabling VPN for terminated users, and changing passwords) would have stopped this from ever occurring.

[ Parent | on HN ]
Re:Cardinals Face F.B.I. Inquiry in Hacking of Astros’ Network by jessaustin on Tuesday June 16, 2015 @02:51PM (#9727986)
No this was on-boarded employees using the same passwords at their new job that they had used at the old job. I bet the Cardinals were at least savvy enough to disable Luhnow's old accounts.
[ Parent | on HN ]