NUS server hacked

Hackers infiltrated one of the National University of Singapore's Web servers yesterday, leading to the re-setting of passwords for affected accounts.

The hackers, who call themselves Team Intra, made staff user names, domain information and hashed passwords - the taking of a variable-length password and creation of a cryptic, fixed-length one - public, reported SC Magazine of Australia yesterday.

The IT security magazine reported that the hackers were spurred on by an error message generated by probes of the NUS website, which allegedly read: "If you're trying to use the SQL error message to dig for juicy information, get lost."

The magazine also informed the NUS about the hack.

When approached, an NUS spokesperson said it has looked into the matter and "ascertained that the information stored on the server is not of a confidential nature". The university did not reveal how many accounts were affected.

ORIGINAL SOURCE
Content used in this not-for-profit blog remain the property of their respective owners.