4 ms·

It looks like this is the same password from the last hack. Did they really not change their passwords?

• infosecslave 13y ago
  Same mysql server also appeared to accept * as the password for the root user.
  • eli 13y ago
    That doesn't really make any sense. That's not a MySQL default, so you're saying they intentionally set the root user password to '*'? I'm not sure I buy that.
    • infosecslave 13y ago
      They're also running MySQL 3.
      • eli 13y ago
        Be that as it may, I'm pretty sure I've been using MySQL since version 3 and I don't recall '*' ever working as a password.