Ohad's Blog

Homeless.co.il was hacked by turkish hackers

Earlier today it was published that Turkish hackers managed to grab a list of user details (32k) including emails and password. (add to this 72k email accounts that were hacked)

When will site owners learn to use hash codes instead of password ???

From my point of view the owner of the site should be blamed for the damage as much as the hackers who did it, you can expect someone to build a site not to mention a leading site and treat security as an after thought !

For anyone wondering who is effected… the list is open on the wild it took me several min to find it in order to look if I've been personally hit (i wasn’t worried much as i do use password generator to supply password on the fly to sites that I'm surfing at…and not having the same password for all of my accounts)

Some point of interest by looking at the list:

The list contains 3026 distinguished domains … of course i cant list all the domains here  due to the space of this post so i left only the ones with more then 3 people coming from.

As you can see… we have large representation of Remax, Amdocs, Cellcom, Pelephone, Orange, Comverse, HP, Intel… and even some government accounts….

lots of security officers have already had to react… or probably will do tomorrow…

I wonder how many ISPs and public mail users comming from gmail/walla/hotmail/yahoo … use the same password that was published on the excel for their own email/pay pal accounts… my guess is that that out of 27k ISPs account some do…

If you ever used homeless… and have one pass for all…change your password asap !

IASA Israeli Chapter 2nd Meeting (Tomorrow)

IASA Israeli chapter 2nd meeting will take place tomorrow and this time it will be based on community-led discussions around Architecturally significant topics.

Q: What does "community-led discussions" mean ?
A: Any participant will be able to propose any topic she finds interesting from a software architecture perspective. Other participants who find the topic interesting will join the discussion in a dedicated meeting room. 

Q: I want to propose a discussion topic. What do I need to do ?
A: either proposed it using in the Linkedin discussion, or propose it spontaneously during the introductory part of the meeting where we will gather divide to topics to time slots.

Q: I do not want to propose a topic. Just to join a discussion. Can I ?
A: Yes, of course. We will not force you to propose a topic (J) and you are very welcome to join any discussion topic you find interesting.

Q: If I choose a topic and later change my mind and want to move to another discussion, can I ?
A: Yes, If you choose to enter a discussion and after some time you find it less in your interest you are welcome to move on to another discussion - no hard feelings

Q: Are there any examples of such architecturally significant topics you intend to propose ?
A: Yes. Here are some samples:

SOA Patterns
Architecture Styles and Patterns
Architecture performance plan
Cross platform development
RIA vs. Web vs. Desktop
Object Oriented Design Evaluation and Measurement
Architectural Patterns and Anti Patterns
High scalability challenges and new technologies
Software Reuse in Practice
...
[ Your own subject here ]
...

You are welcome to come and attend the event. (Free of charge)

Date: Thursday, July 08, 2010 from 5:00 PM - 7:45 PM (GMT+0200)
Location:
HP Raanana
Dafna 9
Raanana ISRAEL

For more information click here: IASA Israeli Chapter - 2nd Meeting

IASA Israeli Chapter Management Team.
Danny Cohen, Hayim Makabee, Michael Kalika, Ohad Israeli.