3 ms·
Summary: he stored all his passwords (for servers, Gmail, Skype, AIM, etc.) in allinfo.txt on his web server.
by dchest 18y ago
Summary: he stored all his passwords (for servers, Gmail, Skype, AIM, etc.) in allinfo.txt on his web server.
- henning 18y agoWas it because his passwords were so long and complicated that he couldn't remember them? Irony.
- csomar 18y agothis happen with me sometimes, i think that no one will think of this file to open or think of its content. Two mistakes he made 1- the file name is easy to guess 2- he allowed file listening in his server
- dryicerx 18y agoI asked the guy who did this what the entry point was, The file name was not guessed, it was a shell command injection on the website, doing a ls listed an interestingly named file "allinfo.txt". Looking at this, it had the ssh username/password...
- jerryji 18y agoCool, that's why it's called HACKER news here :)
- cliffy 18y agoYou'd think that a self-professed hacker would know about password safes.