Hacker reveals embassy e-mails

**Cellus** · 09-06-2007, 05:14 PM

"A Swedish security expert released last week the addresses and passwords for 100 e-mail accounts, claiming that he has uncovered a flaw that exposes more than a thousand sensitive e-mail accounts at government agencies, such as embassies, and corporations..."

Courtesy of SecurityFocus (owned by Symantec):
http://www.securityfocus.com/brief/581

**Cellus** · 09-10-2007, 01:27 PM

Follow-up:

"Embassy leaks highlight pitfalls of Tor"
http://www.securityfocus.com/news/11486

Personal commentary: Using Tor without end-to-end encryption is, quite frankly, incredibly foolish. How major corporations and government agencies use Tor without end-to-end encryption is mind-boggling. Tor is primarily designed to anonymize traffic. This "pitfall" of Tor has been well-known for quite some time. For a security administrator to not consider it for the transmission of sensitive information is downright dangerous. I am, personally, astonished. The "package" itself needs to be secured, not just the transmission medium.

09-06-2007, 05:14 PM	#1 (permalink)
Cellus Moderator Networking Team Join Date: Aug 2006 Location: Canada Posts: 2,633 OS: Windows Vista Business SP1, Windows XP Professional SP3 My System	Hacker reveals embassy e-mails "A Swedish security expert released last week the addresses and passwords for 100 e-mail accounts, claiming that he has uncovered a flaw that exposes more than a thousand sensitive e-mail accounts at government agencies, such as embassies, and corporations..." Courtesy of SecurityFocus (owned by Symantec): http://www.securityfocus.com/brief/581 __________________ TSF Networking Team HijackThis 5 Step Process Donate!

09-10-2007, 01:27 PM	#2 (permalink)
Cellus Moderator Networking Team Join Date: Aug 2006 Location: Canada Posts: 2,633 OS: Windows Vista Business SP1, Windows XP Professional SP3 My System	Re: Hacker reveals embassy e-mails Follow-up: "Embassy leaks highlight pitfalls of Tor" http://www.securityfocus.com/news/11486 Personal commentary: Using Tor without end-to-end encryption is, quite frankly, incredibly foolish. How major corporations and government agencies use Tor without end-to-end encryption is mind-boggling. Tor is primarily designed to anonymize traffic. This "pitfall" of Tor has been well-known for quite some time. For a security administrator to not consider it for the transmission of sensitive information is downright dangerous. I am, personally, astonished. The "package" itself needs to be secured, not just the transmission medium. __________________ TSF Networking Team HijackThis 5 Step Process Donate! Last edited by Cellus : 09-10-2007 at 01:28 PM.