Episode 168 - The Purple Pineapple Episode

<p><strong>This week in InfoSec (09:32)</strong></p><p>With content liberated from the “today in infosec” twitter account and further afield</p><p>18th September 2001: The Nimda worm was released. Utilising 5 different infection vectors, it became the most widespread virus/worm after only 22 minutes. $ echo "admin" | rev nimda  </p><p><a href="https://twitter.com/todayininfosec/status/1703760366688211041">https://twitter.com/todayininfosec/status/1703760366688211041</a></p><p>16th September 2008: 20-year-old David Kernell compromised the Yahoo! email account of US vice presidential candidate Sarah Palin, then posted her emails to 4chan. 2 years later he was found guilty and sentenced to a year in prison. At age 30 he died of complications related to MS.</p><p><a href="https://twitter.com/todayininfosec/status/1703169477548884296">https://twitter.com/todayininfosec/status/1703169477548884296</a></p><p> </p><p><strong>Rant of the Week (14:55)</strong></p><p>[We’re sympathetic of companies who get hacked and what they have to deal with, but there comes a time when they’re repeatedly hacked and you have to ask questions]:</p><p><a href="https://www.bleepingcomputer.com/news/security/t-mobile-app-glitch-let-users-see-other-peoples-account-info/">T-Mobile app glitch let users see other people's account info</a></p><p>T-Mobile customers said they could see other peoples' account and billing information after logging into the company's official mobile application.</p><p>According to user reports <a href="https://www.reddit.com/r/tmobile/comments/16nhyew/megathread_tmobile_app_was_temporarily_leaking/">on social media</a>, the exposed information included customers' names, phone numbers, addresses, account balances, and credit card details like the expiration dates and the last four digits.</p><p>As first reported by <a href="https://www.theverge.com/2023/9/20/23881825/t-mobile-account-security-breach-customer-information-leak">The Verge</a>, some of the customers affected by this issue could see the sensitive information