• It’s pretty egregious that AT&T would have it for such a device that probably has known exploit candidates (attack code) on, say, the Russian (underground) markets.
• Escher “Weev” Auernheimer of Goatse Security • Talking about how his group uncovered a major flaw with AT&T’s security mechanism, which led to Gawker posting about the results. Why did they go to Gawker and not AT&T? “We did want not engage directly with AT&T in case they tried to serve us (an injunction) or something,” he said. How did they do it? It was a simple brute-force attack that required no hacking. And people offended about the group’s hilarious name? “If someone is offended to where they can’t deal with us … then they’re a douche bag and we don’t want to be employed by them anyway.” A fun read. source

Posted by Ernie Smith • Permalink