Slashdot Mirror
Amazon Flaw Lets Password Variants Through
Wired reports that it has confirmed a password flaw affecting some Amazon accounts. If your password hasn't been changed in a while ("the past several years"), it may be less secure than you'd like. As Wired explains, for these older accounts, "[...] if your password is “Password,” Amazon.com will also let you log in with 'PASSWORD,' 'password,' 'passwordpassword,' and 'password1234.'" The article suggests that Amazon's use of the Unix crypt() tool may be at fault. (Hat tip to E. Maureen Foley for pointing this out.)
Is it supposed to show all of my passwords in the article? Or do you just see stars?
My password of hunter2 was not compromised.
XML is like violence. If it doesn't solve the problem, use more.
I think its safe to say my password is safe
Just this morning my wife said she had gone to the bank to open an account for our son and they told her this bank has accounts for five people with the same name. We thought his name was less common than that. I asked her why she thought that was a big deal and she said "you know, when you use your name as your password" and I said what?.
http://michaelsmith.id.au
I hear the site also accepts minor misspellings, anagrams, close synonyms and Cockney rhyming slang.