spechal.com » Security

Plaintext Offender : BidVertiser

Spechal — Mon, 04 Jul 2011 19:09:07 +0000

If you have an account with BidVertiser, your password is stored in plain text and emailed back to you when you request it. This also means customer service can look up your account and get your password.

I informed them of this and their response was:

Done by: Customer Service, Publishers & Referral Status: Closed Action Date: Monday, 07/04/2011 03:30 PM
Respond:
Dear Travis,

The option to include login information in our contact emails is available through your control panel, through Account Management – Edit Profile. I have disabled the option for you.

Best Regards,
BidVertiser Support Team

To which I replied:

Done by: customer Status: Follow Up Action Date: Monday, 07/04/2011 02:03 PM
Customer Comment:
You’ve missed the point. Passwords are not to be stored in plain text and emailed out to your users over insecure connections. Passwords should be reset, not sent. If someone were to get into your database without your knowledge, they would also be able to compromise each account without any sort of password attack, since you guys would just show the passwords to them.

We’ll see if they even care.

### edit ###

Response:

Dear Travis,

Noted.

Best Regards,
BidVertiser Support Team

###

I guess they do not care.

Low Level Format Disk Drive with Linux

Spechal — Mon, 13 Jun 2011 01:43:22 +0000

Doing a log level format with linux is super easy. Make sure the drive you want to format is not mounted and determine the device in /dev/ i.e. /dev/sdb Enter the following command to turn all the bits on the … Continue reading →

Use HackIt and Revolution ROM to sexify your HTC Inspire

Spechal — Sun, 15 May 2011 07:21:19 +0000

Got an HTC Inspire 4G? Tired of all the bloatware and running apps. Tired of have to kill those apps over and over? Root your phone (root is the superuser account in Linux, which Android runs on)! This voids all warranties, but it is worth it. Use HackIt to permanently root your HTC, then download the HTC Revolution ROM and flash your phone with it. Then install Terminal Emulator to access your phones root shell. You’ll also want Gemini App Manager (Free), hit Menu to go into Expert Mode and you can uninstall ANYTHING, even your keyboard (which you should NOT do).

All you need to know is located at this web site: http://www.addictivetips.com/mobile/install-android-revolution-4g-rom-on-htc-inspire-4g/

Linux: Cleaning up your login tracks

Spechal — Sun, 15 Nov 2009 21:28:24 +0000

So you’ve logged into a Linux machine but you don’t want anyone to know you were there. Why? Who cares. Here are a couple of things to clean up your tracks.

Once you log in, you’ll notice that message that tells you the last time and location you logged in from. To get rid of that, we need to clear out /var/log/wtmp and /var/log/lastlog. We can do that easily with cat > /var/log/wtmp and cat > /var/log/lastlog

To clear out the command history, execute history -c

Hope that helps!