Security Breach!!
 

I was uploading to my boss' server today. I'm what you might call "click happy". (I often move too fast and click the wrong button.)

While uploading using FTP, I clicked on an arrow that lead me deeper into the server, eventually I was at the main server administration page. From there I was able to see hundreds of usernames that were actually folders for that users ftp info.

They were encoded:
XXXXX-0945
XXXXX-0946
XXXXX-0947
and so on...

I clicked on some of them which led deeper into the server. Several led me to password protected areas, and some files were labeled as user logs. With my curiosity peaked, I viewed one. I found slightly encrypted usernames and passwords.

By slightly I mean, that their username and password weren't encrypted but their cc info was. Too many numbers to be CC. I then viewed a few html files and found the domain names that these usernames and passwords went to. (again, out of sheer curiosity)

I'm too paranoid, and my morals are too high for me to do anything illegal with this info. Which brings me to why I'm posting it here.

Is it really that easy for anyone to tap into our servers? I found it by accident, I'm sure some asshole that wants to do some damage, would have a field day with the info I was just exposed to.

How can I prevent someone from accessing my FTP server like that?

I even found some email logs with what looked like thousands of email addresses.

Fuck, this is scary. It can't be that easy. Can it?
Does this make me a hacker?
Or an idiot?


------------------
[email protected]
LeeannOnline.com

You need spanked! http://bbs.gofuckyourself.com/board/smile.gif~

are you with conepuppy by any chance?

No, who is that?

Or did I just miss a joke?

------------------
[email protected]
LeeannOnline.com

Want to get real scared RedShoe, read the book The Cookoo's egg. It is dated, but it is the story of a Berkley student who through a simple accounting error in the server time found a hacker that was going through their computer to access military computers.

It can be pretty easy if you don't close your back doors. We have had Sub7 trojans probe our system, and have had some random attacks but with Norton Personal Firewall, Lockdown, and a good firewall built into my Netgear box, we have decreased the chances.

But there are holes in a lot of the op systems, and if the hacker knows of the hole, and your sys op doesn't and he's left it open....bingo!

I don't know how to hack, and I really don't want to learn, but a lot of the kids find it a challenge today.




------------------
~Every time I call myself Webmistress, I feel I should be in spike heels with a whip~

Greatest ADULT WEB HOSTING on The NET !
Free Erotic Fantasy Best Quality TGP's