RSSP2P backdoor spills personal info on Supreme Court Justice
By Tim Conneally | Published July 9, 2008, 4:07 PM
Personal data from over two thousand clients of a Virginia investment firm was obtained through a Limewire backdoor and made available for over six months before coming to light.
It took a reader of the Washington Post's Security Fix blog to point it out last month, finally alerting Wagner Resource Group that their clients' personal data had been leaked. Of the 2,000 clients listed, about 700 entries contained a name, birth date, and Social Security number; the rest of those listed had slightly less information. Affected clients include several "high-powered lawyers," and Clinton-appointed Supreme Court Justice Stephen G. Breyer.
The information was found to have been obtained through an (unnamed) employee's use of peer-to-peer file sharing service Limewire on a company workstation. Yes, there are apparently people who still use Limewire, despite its widespread reputation as an unsafe, if not entirely outdated, service. For over a year however, the Limewire brand has slowly been changing into a digital music shop like iTunes, Amazon, and now Rhapsody.
Wagner reportedly sent letters to affected clients last week which offered six months of free credit report monitoring, an almost standard practice after such events transpire.
Maybe the Supreme Court will take the issues of online privacy, security, and identity theft a little more serious now?
Score: 0
Ha! Suck on that for using LimeWire!
Score: 0
Backdoor ... As in a means to circumvent normal security. Traditionally this term is used to describe what the programmer has placed in software to access the internals without having to go thought all the security procedures. It is a valid statement.
Obviously the domain admin at this place has never heard of a software restriction policy, and does not regard a software/traffic audit important.
Numpty !!
Score: 0
"Obviously the domain admin at this place has never heard of a software restriction policy, and does not regard a software/traffic audit important."
Just upholding the tradition of 'domain admins' in most small investment firms...
Score: 0