Data Breaches

1163 readers

23 users here now

Information about data breaches, data leaks, ransomware attacks, and other related stories.

Companion communities

[email protected] - centered on the cybersecurity and information security profession.

Icon attribution

If someone is interested in moderating this community, message @[email protected].

founded 2 years ago

MODERATORS

[email protected]

129

Marriott admits it falsely claimed for five years it was using encryption during 2018 breach (www.csoonline.com)

submitted 9 months ago by [email protected] to c/[email protected]

4 comments fedilink hide all child comments

Marriot revealed in a court case around a massive 2018 data breach that it had been using secure hash algorithm 1 and not the much more secure AES-1 encryption as it had earlier maintained.

you are viewing a single comment's thread
view the rest of the comments

[–] [email protected] 19 points 9 months ago

Many years ago, back when Marriot locked their non-shit WiFi behind a paywall I was able to get around it by changing some values (Iirc, I literally changed the price that was sent to the server to 0.00) with TamperMonkey lol no server side validation, no lookups, no checksums no verification of any kind lmao

So this doesn't surprise me in the least