Slashdot Mirror
Adobe Hacked: Almost 3 Million Accounts Compromised
sl4shd0rk writes "Adobe Systems Inc. is expected to announce today that hackers broke into its network and stole source code for an as-yet undetermined number of software titles, including its ColdFusion Web application platform, and possibly its Acrobat family of products. The company said hackers also accessed nearly three million customer credit card records, and stole login data for an undetermined number of Adobe user accounts."
In related news, it turns out Adobe will give you some sort of software if you give them a credit card number. What a crazy business model!
Adobe have been pushing software rental for the last couple of years. This involves recurrent payments. Recurrent payments require the vendor to store credit card details, or outsource the payment processing to a third party who stores the details.
Either way, if you're renting software your credit card details are being stored.
In related news, it turns out Adobe will give you some sort of software if you give them a credit card number. What a crazy business model!
Not for long... their new business model is that they will let you have access to their cloud if you give them a credit card number, and keep paying them regularly.
The articles so far seem to indicate the card numbers were encrypted.
"We make our world significant by the courage of our questions and by the depth of our answers." Carl Sagan
Open source programs have their code exposed to everyone, including those with malicious intent, and are therefor "battle hardened" for security.
While this would the expected situation, the evidence demonstrates that it isn't.
http://www.zdnet.com/six-open-source-security-myths-debunked-and-eight-real-challenges-to-consider-7000014225/
http://www.theregister.co.uk/2004/03/05/does_open_source_software_enhance/
etc..
You can search this on your own. The general consensus is that the "many eyes" theory is flawed, and outside a few exceptions where a particular product has been security hardened beyond usual standards, most experts agree open source software in general tends to be no more or less secure than proprietary software. On the flip-side however, it is true that when the source code for a closed-source product does get compromised, we do generally get a new flood of exploits.
"The true measure of a person is how they act when they know they won't get caught." - DSRilk
Citibank offers "Virtual Credit Cards" that are generated for you on demand. Each card is valid for one merchant only (the first transaction locks the merchant), has configurable expiration date and maximum amount limit. Even if stolen such virtual cards are of little use to the bad guys.