Subject: [Pwg-Announce] IEEE username/password breach

From: Brian Smithson <[email-masked]>
Date: Tue, 25 Sep 2012 12:21:55 -0700

Sorry about the off-PWG-topic, but...

IEEE did two stupid things: (1) put usernames and plaintext passwords in a
web server log file, and (2) left the log unprotected for a month or so.
About 100,000 unique username/password pairs were exposed. I don't think
IEEE has notified affected users yet. You might want to think about changing
your ieee.org password. Details: http://ieeelog.com.

-- 
Regards,
Brian Smithson
PMP, CSM, CISSP, CISA, ISO 27000 PA
Senior Security Architect
Global Solutions Engineering
Business Development Center
Ricoh Americas Corporation
[email-masked]
(408)346-4435

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

_______________________________________________
pwg-announce mailing list
[email-masked]
https://www.pwg.org/mailman/listinfo/pwg-announce