Slashdot Mirror
That North Korean Facebook Clone Has Already Been Hacked (vice.com)
Remember yesterday's story about an off-the-shelf Facebook clone in North Korea? Within a few hours that site was hacked by an 18-year-old college student in Scotland.
An anonymous reader writes:
Using the default credentials, Andrew McKean posted "Uh, I didn't create this site just found the login" in the site's box for Sponsored links. "McKean was able to become an admin for the site just by clicking on the 'Admin' link at the bottom of the site and guessing the username and password," writes Motherboard, which adds that the password was "password". McKean says the breach "was easy enough," and granted him the ability to "delete and suspend users, change the site's name, censor certain words and manage the eventual ads, and see everyone's emails."
The teenager said he had "no plans" for the compromised site -- except possibly redirecting it to an anti-North Korean page.
The teenager said he had "no plans" for the compromised site -- except possibly redirecting it to an anti-North Korean page.
The word "hacked" is overused. Making a fairly easy assumption that the default UID / PID has not been changed by some rube North Koreans who didbn't expect anyone to notice the demo site is hardly a "hack".
On the other hand, I'll bet that the REAL North Korean intel guys gathered a whole lot of data from the honeypot site.
If you want news from today, you have to come back tomorrow.