Slashdot Mirror
Fox News' FTP Password Anyone?
An anonymous reader writes "While browsing around the Fox News website, I found that directory indexes are turned on. So, I started following the tree up, until I got to /admin. Eventually, I found my way into /admin/xml_parser/zdnet/, in which, there is a shell script. Seeing as it's a shell script, and I use Linux, I took a peek. Inside, is a username and password to an FTP. So, of course, I tried to login. The result? Epic fail on Fox's part. And seriously, what kind of password is T1me Out. This is just pathetic." It's already been changed of course, but that's still pretty amusing.
Dude, why didn't you look around for the bug that makes them misreport the news so horribly that a majority of FOX News viewers still believes Iraq was responsible for 9/11 and Saddam had WMDs when the US invaded?
"It is nice to know that the computer understands the problem. But I would like to understand it too." --Eugene Wigner
You're going to jail and slashdot is getting shut down. It's a federal offense to interfere with an official government propaganda outlet.
Enjoy your stay in gitmo!
Now the question is, was it changed by Fox or someone else.
That is all we need, months of stories how "evil hackers got into Fox network"
Followed up with "Hackers: Evil and must be stopped?" to linking hacking to Obama, a danger to your kids and finally Hackers gone wild at Spring break.
Oh shut the fuck up, you Gentoo fanboi. If they used Gentoo, the server would still be recompiling from a kernel update six months ago. Take your Genntoo, and jam it up your ass sideways and backwards. It's 0.038% more optimized for that.
>And honestly how many of you guys use a password like YwMCU07D?
Great - now I have to go change all my passwords.
1 in 4 Maine children in struggle with hunger.
I agree, and my personal experience with corporate passwords has been the same. I'm sure this would disturb security geeks at various levels (or get them salivating!), but I don't see this as a *huge* loophole since most of the systems are inside the corporate firewall anyway. IMHO, this is about as big a security threat as an employee or a contractor copying sensitive data (which the password is protecting) and trying to profit from it illegally.
A system that I was managing once started crashing, and further investigation revealed that the password of an upstream system had been changed. When we contacted the admin team of the offending application, they informed us that they had upgraded the password from 123 to the "highly secure" (in their words) 234.
...to doing 'fair and balanced' journalism.
>>And honestly how many of you guys use a password like YwMCU07D?
>Great - now I have to go change all my passwords.
Don't feel bad, I had the same combination on my luggage.
Kwisatz Haderach
Sell the spice to CHOAM
This Mahdi took Shaddam's Throne
Don't worry about it. I just did it for you.