I'm not trying to defend Acxiom, who are cetainly open to criticism here, but your observation is utterly without merit. As you should know, any normal FTP server (assuming it was UNIX) will have its account passwords in an encrypted form on the server itself. If you're advocating Kerberos, say so. It would also be reasonable to claim that Acxiom should have been enforcing strong passwords. Your opinion, however, is worthless and demonstrates your complete lack of knowledge. Try learning at least the basics of authentication before commenting on it.

BTW, I hope this fool does a nice, long stint in jail and I'm happy Axciom is saddling him with enough debt to last the rest of his life. Maybe other stupid haxors (especially ones with employee access) will think twice about flexing their skillz.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/7697/24267#24267