[AusNOG] MelbourneIT stores domain passwords in cleartext - iTnews.com.au

[Shane Short]

I think you'll find Ausregistry stores them in plain text, too. I had 
one for a domain I'd planned to transfer a while ago.. went to the 
Ausreg page to get it sent to me and I got the same password sent to me 
(so it's obviously not regenerated when you request it). I think it's 
probably unfair to target Melbourne IT specifically.


> Robert Hudson <mailto:hudrob at gmail.com>
> 20 March 2014 9:47 am
> Sorry to drag this old thread up - but I can confirm that MelbourneIT 
> aren't alone in storing domain auth passwords in cleartext - I've just 
> received an email from Europe Registry 
> (http://www.europeregistry.com/) with a domain auth password contained 
> within it in cleartext.
>
>
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
> Peter Lawler <mailto:ausnog at bleeter.id.au>
> 11 March 2014 4:45 am
> It occurs to me that some on noggers may not have previously been 
> aware of this. But now that it's 'in the news', etc.
>
> http://www.itnews.com.au/News/374095,melbourneit-stores-domain-passwords-in-cleartext.aspx 
>
> _______________________________________________
> AusNOG mailing list
> AusNOG at lists.ausnog.net
> http://lists.ausnog.net/mailman/listinfo/ausnog
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140320/7419baaf/attachment.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: compose-unknown-contact.jpg
Type: image/jpeg
Size: 770 bytes
Desc: not available
URL: <http://lists.ausnog.net/pipermail/ausnog/attachments/20140320/7419baaf/attachment.jpg>