Data Breaches

967 readers

31 users here now

Information about data breaches, data leaks, ransomware attacks, and other related stories.

Companion communities

[email protected] - centered on the cybersecurity and information security profession.

Icon attribution

founded 1 year ago

MODERATORS

[email protected]

129

Marriott admits it falsely claimed for five years it was using encryption during 2018 breach (www.csoonline.com)

submitted 4 months ago by [email protected] to c/[email protected]

4 comments fedilink hide all child comments

Marriot revealed in a court case around a massive 2018 data breach that it had been using secure hash algorithm 1 and not the much more secure AES-1 encryption as it had earlier maintained.

you are viewing a single comment's thread
view the rest of the comments

[–] cm0002 21 points 4 months ago

Many years ago, back when Marriot locked their non-shit WiFi behind a paywall I was able to get around it by changing some values (Iirc, I literally changed the price that was sent to the server to 0.00) with TamperMonkey lol no server side validation, no lookups, no checksums no verification of any kind lmao

So this doesn't surprise me in the least