In order to make life easy for all concerned, Billabong chose to store details for their web site subscribers in plain text. How very thoughtful.
iTWire recently wrote in somewhat glowing terms of the steps Nvidia took to ensure the web access accounts of its customers were well protected.
We can give no such praise to whoever built Billabong's website.
According to a dump from their password database, Billabong stored all passwords in plain text - presumably this made it easier to tell a user what their password was if they'd forgotten it. It also made life very easy for any hackers who wished to masquerade as the users on the site.
It also made the process (for any user who made this mistake) of trying the Billabong password against the email account. What could be easier than to write a simple script that lifted the email address and password out of the dump file and attempted to log in with them at the various webmail services.
Until SC Magazine brought the breach to Billabong's attention, the company was entirely unaware of the problem.
It appears that all accounts have been disabled, but the total lack of ANY advice from the company on their website is very concerning - the average user will not know that their password (possibly used elsewhere) is visible in plain text.
The company has been contacted for comment.
Subscribe to ITWIRE UPDATE Newsletter here
GRAND OPENING OF THE ITWIRE SHOP
The much awaited iTWire Shop is now open to our readers.
Visit the iTWire Shop, a leading destination for stylish accessories, gear & gadgets, lifestyle products and everyday portable office essentials, drones, zoom lenses for smartphones, software and online training.
PLUS Big Brands include: Apple, Lenovo, LG, Samsung, Sennheiser and many more.
Products available for any country.
We hope you enjoy and find value in the much anticipated iTWire Shop.
ENTER THE SHOP NOW!
INTRODUCING ITWIRE TV
iTWire TV offers a unique value to the Tech Sector by providing a range of video interviews, news, views and reviews, and also provides the opportunity for vendors to promote your company and your marketing messages.
We work with you to develop the message and conduct the interview or product review in a safe and collaborative way. Unlike other Tech YouTube channels, we create a story around your message and post that on the homepage of ITWire, linking to your message.
In addition, your interview post message can be displayed in up to 7 different post displays on our the iTWire.com site to drive traffic and readers to your video content and downloads. This can be a significant Lead Generation opportunity for your business.
We also provide 3 videos in one recording/sitting if you require so that you have a series of videos to promote to your customers. Your sales team can add your emails to sales collateral and to the footer of their sales and marketing emails.
See the latest in Tech News, Views, Interviews, Reviews, Product Promos and Events. Plus funny videos from our readers and customers.
SEE WHAT'S ON ITWIRE TV NOW!
