Site icon Liquidmatrix Security Digest

Fox News Pwned

This could not happen to a more suitable “news” outfit.

From Whitedust:

I do not condone illegal activity. I have meerly exposed a flaw. What you do with it is your own business. Do the right thing and join me in reporting it via the following:
Jeff Goodman
212-503-4972
jeffrey_goodman@ziffdavis.com

So…

While browsing around the Fox News website, I found that directory indexes are turned on. So, I started following the tree up, until I got to /admin. Eventually, I found my way into /admin/xml_parser/zdnet/, in which, there is a shell script. Seeing as it’s a shell script, and I use Linux, I took a peek. Inside, is a username and password to an FTP. So, of course, I tried to login. The result? Epic fail on Fox’s part. And seriously, what kind of password is ********. This is just pathetic.

Let’s see them try blame this on immigrants/democrats/terrorists/women/men/homosexuals/cats/dogs … you get the idea.

🙂

Read on.

Article Link

[tags]Fox News Hacked, Hackers, Fox News, Bad Security[/tags]

Exit mobile version