[AusNOG] Adobe Hack

[Damian Guppy]

The dump eric is talking about is quite readily available on many websites
now so should be treated as if public domain. The important info that is in
it is encrypted with what appears to be 3DES, and to date no one has broken
the key. Im also pretty sure the copy of the dump Eric has is missing the
(encrypted) cc info, but i could be wrong. I am sure he had no intention of
passing credit card info out encypted or not as common sense.

--Damian


On Wed, Nov 13, 2013 at 7:43 PM, Paul Wallace <paul.wallace at mtgi.com.au>wrote:

> Best you undertake proper probity tests before releasing any cc info Eric.
>
> Reason? ...
> There may be more than just the one member known to this list, a member
> who now holds himself out to be a God fearing ICT professional, but in
> reality has spent time in jail for criminal activities to do with credit
> cards, asking you for details.
>
> -P
>
>
> > On Nov 13, 2013, at 8:47 PM, "Pinkerton, Eric (AU Sydney)" <
> Eric.Pinkerton at baesystemsdetica.com> wrote:
> >
> > Noggers,
> >
> > I have a copy of the creds stolen during the Adobe compromise last
> month, so if you want a dump of users relevant to your domain, (in order to
> inform them that now might be a good time to change their passwords) ping
> me off list and I will do my best..
> >
> > Be warned it's quite a haul (2.9 million users)
> >
> >
> http://krebsonsecurity.com/2013/10/adobe-to-announce-source-code-customer-data-breach/
> >
> > E
> > _______________________________________________
> > AusNOG mailing list
> > AusNOG at lists.ausnog.net
> > http://lists.ausnog.net/mailman/listinfo/ausnog
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20131113/1eae8038/attachment.html>