Re: [AusNOG] APNIC resets passwords after whois credentials spill

2017-10-24 Thread David Smith
Seems to be a positive comment on the action but with a corresponding negative on the exposure itself. Perhaps you should choose a viewpoint when posting to a forum for "professionals" (yes, these are air-quotes, as IT engineers we mostly make it up as we go). I think that is safe to say that all

Re: [AusNOG] APNIC resets passwords after whois credentials spill

2017-10-24 Thread Bevan Slattery
+1. Exemplary. [b] > On 24 Oct 2017, at 9:12 pm, Ian Henderson wrote: > >> On 24 October 2017 at 07:00, Mister Pink wrote: >> APNIC has been forced to reset all passwords for objects in its whois >> database after leaking authentication credentials

Re: [AusNOG] APNIC resets passwords after whois credentials spill

2017-10-24 Thread Ian Henderson
On 24 October 2017 at 07:00, Mister Pink wrote: > APNIC has been forced to reset all passwords for objects in its whois > database after leaking authentication credentials that were hashed with a > relatively weak hashing algo. > Hats off to APNIC's response here, they