Microsoft Store hacked in India, passwords stored in plain text
1–10 of 41 posts
Re: Microsoft Store hacked in India, passwords stored in plain text
#2Can someone explain why the screenshot contained text that looks Chinese.
Re: Microsoft Store hacked in India, passwords stored in plain text
#3Can someone explain why the screenshot contained text that looks Chinese.
I think engadget just blurred out the passwords there.
Re: Microsoft Store hacked in India, passwords stored in plain text
#4I love how the fields are prefixed with acronyms for the table name.
Re: Microsoft Store hacked in India, passwords stored in plain text
#5Can someone explain why the screenshot contained text that looks Chinese.
I think engadget just blurred out the passwords there.
No, if you look at the characters in the UI.
Still, clearly the answer is that's a hacker's computer. Just because its an India store doesn't mean the hacker is Indian.
Re: Microsoft Store hacked in India, passwords stored in plain text
#6I love how the fields are prefixed with acronyms for the table name.
Curious, is there a good reason to do this ever?
Re: Microsoft Store hacked in India, passwords stored in plain text
#7I love how the fields are prefixed with acronyms for the table name.
Curious, is there a good reason to do this ever?
I guess you could say that then you never have to qualify the column name in the query (as they're unique across the system). It's a pretty crummy reason to do it though.
More likely it's just that someone decided that was how they were going to do it one day and it stuck.
I worked on a system where all tables were prefixed with "tbl_" - even when they were often views and not tables at all....
Re: Microsoft Store hacked in India, passwords stored in plain text
#8Earlier quoted context omitted.
I think engadget just blurred out the passwords there.
No, if you look at the characters in the UI. Still, clearly the answer is that's a hacker's computer. Just because its an India store doesn't mean the hacker is Indian.
Some engadget reader sent the content of the file with a screenshot. Maybe a hacker's computer not necessarily the hacker's computer. Just to be clear.
Re: Microsoft Store hacked in India, passwords stored in plain text
#9The store isn't actually run by microsoft, but rather Quasar Media. It tarnishes Microsoft's name, but it isn't their fault.
http://www.theverge.com/2012/2/12/2793459/microsoft-store-in...
Re: Microsoft Store hacked in India, passwords stored in plain text
#10So I've worked in an ASP.net environment and I generally hated it, but ...
The overall framework had a lot of features and examples abounded (http://msdn.microsoft.com/en-us/library/ff648341.aspx)[2005]. It's very difficult to imagine a company > the many ASP.net examples in order to store passwords in plaintext. It's astounding to see that Microsoft itself did so... Seems that it says that examples don't actually abound or that the system is so complex that not even Microsoft could understand it.
More likely, Microsoft hired a low-cost contractor to build/manage their Indian site and suffered. Another sign that MS has lost touch.
EDIT: another commenter writes "The store isn't actually run by microsoft, but rather Quasar Media.", so Microsoft outsourced their site...