ATT dumps Kevin Mitnick
theregister.co.uk
ATT dumps Kevin Mitnick
1–10 of 45 posts
Re: ATT dumps Kevin Mitnick
#2So AT&T is basically admitting their approach to security is "security through obscurity"?
As long as you're not a high profile celebrity you should be ok because not one wants to own you...
Re: ATT dumps Kevin Mitnick
#3An 8 digit, all numerals password? Really, Mitnick?
Also, it wasn't just AT&T that is refusing service to him, his webhost HostedHere.net did the same thing.
And if this has been happening over and over again for 9 years why didn't he just want to go to another service provider?
Re: ATT dumps Kevin Mitnick
#4So AT&T is basically admitting their approach to security is "security through obscurity"? As long as you're not a high profile celebrity you should be ok because not one wants to own you...
Well, they are admitting that their security system isn't flawless. Having Kevin Mitnick using your service is the equivalent of asking to be hacked by a particular set of people... eventually your security will get broken.
Which is not to say that AT&T has good security, all we can tell from this is that it can be broken...
Re: ATT dumps Kevin Mitnick
#520k per year? He's doing something wrong...
Re: ATT dumps Kevin Mitnick
#6An 8 digit, all numerals password? Really, Mitnick? Also, it wasn't just AT&T that is refusing service to him, his webhost HostedHere.net did the same thing. And if this has been happening over and over again for 9 years why didn't he just want to go to another service provider?
Indeed. Other providers host and maintain the security of as-high-profile "targets".
More importantly you have to question how much of the security problem Mitnick poses in this? If he is part of the cause I think AT&T & HostedHere probably are reasonable to want to get rid of him
(btw I suspect the 8 numeral password is a pin number: similar to the ones handed out by banks for online logins. Could still be his fault it is out in the wild though)
Re: ATT dumps Kevin Mitnick
#7A service provider whose top priority was security could have taken another approach to KM... using him like the canary in a mine shaft, an indicator of problems with their security system (allowing all-numerals password would be just one example of such a problem that ought to be fixed).
Re: ATT dumps Kevin Mitnick
#8I find Kevin Mitnick going to the authorities for protection a little bit weird. If your claim to fame is that you are the 'worlds baddest hacker' you take the script kiddies as going with the territory. It's like Billy the Kid complaining about the wanna-be's that want to meet him at noon on main street.
"The move by AT&T came this week after Mitnick hired a lawyer to complain that his privacy was being invaded by people posting Mitnick's account information in public hacking forums"
You need a lawyer to complain these days ?
Most other 'celebrities' have these issues but being a high profile hacker makes you a great target.
The best defence against this is don't get caught hacking... that way your privacy stays yours.
What Mitnick should do is give tit for tat, expose the identities of his attackers. For such a hotshot security consultant (all digits?) that should be a piece of cake, really.
That said, AT&T has no business cutting him off, rather the opposite, they should secure their systems and use the publicity surrounding this to brand themselves as the provider that is good enough to secure even Kevin Mitnicks account.
Re: ATT dumps Kevin Mitnick
#9"In recent years, he's committed the password to memory and has deliberately not shared it with anyone or kept it stored on a computer."
Isn't that what everyone is supposed to do with their passwords?
Re: ATT dumps Kevin Mitnick
#10An 8 digit, all numerals password? Really, Mitnick? Also, it wasn't just AT&T that is refusing service to him, his webhost HostedHere.net did the same thing. And if this has been happening over and over again for 9 years why didn't he just want to go to another service provider?
Indeed. Other providers host and maintain the security of as-high-profile "targets". More importantly you have to question how much of the security problem Mitnick poses in this? If he is part of the cause I think AT&T & HostedHere probably are reasonable to want to get rid of him (btw I suspect the 8 numeral password is a pin number: similar to the ones handed out by banks for online logins. Could still be his fault…
How is it reasonable for AT&T to admit blatant incompetence? Couldn't they have worked with Mitnick to secure his account and even use his case to attract more celebrity customers?