[nsp-sec] ACK AS26 - Re: public password lists of edu/library sites

[SURFcert - Peter]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Daniel Adinolfi wrote on 2010-03-04 14:58:
> ----------- nsp-security Confidential --------
> 
> 
> On Mar 04, 2010, at 04:11, Rolf Gartmann wrote:
>> one of our academic institutions had
>> a VPN case and while investigating they
>> stumbled over 2 links with some creds
>> for edu/library access:
> 
> Thanks for the heads-up.
> 
> If these turn out to be outdated, we'll let y'all know so you know that
> list might be less of a priority for clean-up.

In our case one university they where outdated while at another six
where only recently phished. They knew about three of them. A third
university also mentioned them being recent.

- --
Peter Peters
SURFcert Officer on Duty
cert at surfnet.nl                            http://cert.surfnet.nl/
office-hours: +31 302 305 305    emergency (24/7): +31 622 923 564
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (MingW32)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iD8DBQFLkBJ2elLo80lrIdIRAirEAKCKpWTqIsiOeTkrDlU2aXD3hfjpwACeK++/
tVWiCFMTHG+Ra/n9Eg3Bavs=
=EAqD
-----END PGP SIGNATURE-----