Hacking wasn't involved in this case, so you can get off your soapbox about hackers.

If you read the whole AP article, you'd find that the problem was that these sites were putting FOUO information on anonymous FTP sites. No password (or hacking) required.

The statement from the contractor about how it's secure because it's not on a search engine was intended to highlight their lax and faulty attitude. And actually, that person who made the statement to the reporter wasn't the spokesperson, who would have known better.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/newsbriefs/546/2062#2062