5 ms·
What exactly wasn't believable about it before? Linode confirmed that someone cracked into their system on their blog, which I consider as being confirmation en
by dkuntz2 13y ago
What exactly wasn't believable about it before? Linode confirmed that someone cracked into their system on their blog, which I consider as being confirmation enough for everything.
- ceejayoz 13y agoLinode confirmed they were cracked, but the HTP write-up in https://news.ycombinator.com/item?id=5667027 https://news.ycombinator.com/item?id=5667027 included a lot of additional details, much of it hard to confirm. FBI moles, compromise of a fairly large registrar, etc.
- dkuntz2 13y agoI guess I just didn't see a reason for HTP to lie about it, especially with several smaller pieces out there confirming large portions of it. I suppose I don't understand why it's necessary to know if HTP was being 100% honest when the big details have been confirmed.
- ceejayoz 13y agoThis is the first confirmation I've seen of Name.com being hacked. That's a fairly significant sticking point, particularly as the known attack vector on Linode was a ColdFusion exploit, not a complete takeover of their registrar...
- kouiskas 13y agoThe name.com sample data HTP showed in their log by querying the database was real. Source: I work for one of the companies they used as sample rows when querying the name.com DB. Our head of ops confirmed that the hash in the HTP log was indeed the MySQL 4.1 PASSWORD() unsalted hash of our password at the time. name.com is kind of generous with the term "encrypted" in their email.