NUS Server hacked after DBS bank cards!

Staff passwords at risk as NUS server hacked
Varsity resets passwords and delinks server; says info is 'not confidential'

Published on Jan 6, 2012



Purchase this article for republication

Buy SPH photos


By Lin Zhaowei

A web server that hosted research papers and publications at the National University of Singapore (NUS) was found to have been hacked into on Thursday, a spokesman said.

The passwords of 70 staff members were likely to have been compromised in the incident. But he said that the information stored on the server was 'not of a confidential nature' and none of it had been removed or tampered with.

The information was also accessible to the public, and the affected accounts had access only to the hacked server, not the NUS network, the university added.
Background story

JUST AN EXAMPLE

'We are just here to show the poor security standards some websites have. We have our best intentions.'

A user, who signed off as Team Intra

As a precautionary measure, the passwords of all affected accounts had been reset and the server disconnected from the network, said the spokesman.

http://www.straitstimes.com/BreakingNews/Singapore/Story/STIStory_752543.html

Not surprising. Those IT experts from Indians and Philipines r everywhere at DBS and IBM Singapore lol...

Has NUasS blamed its Sinkie students and staff yet?

http://www.asiaone.com/News/Latest+News/Singapore/Story/A1Story20120106-320315.html

ASIAONE
NEWS
SINGAPORE

Hacker group spurred on by NUS error message
Tweet
AsiaOne
Friday, Jan 06, 2012

The hacker group claiming responsibility for yesterday's hack into a National University of Singapore (NUS) server said that an error message had spurred them on.

Australian IT publication, SC magazine, yesterday reported that the message popped up when the group, Team Intra, had initially probed the website.

It has allegedly stated, "If you're trying to use the SQL error message to dig for juicy information, get lost."

This message spurred the hackers to continue with the attempt.

They exploited a vulnerability in the server's database and gained access to about 70 staff members' user names, passwords and domain information.

Team Intra then posted the information online, where it was accessible to public.

A spokesman from NUS told the media that the leaked information was not of confidential nature. He added that none of it had been removed or tampered with.

He also clarified that the online group hacked into a server, which hosted research papers and publications, and not the NUS network.

The Straits Times reported that NUS has reset the passwords of all affected accounts, disconnected the server from the network.

The spokesperson also said that appropriate measures would be put in place to prevent similar incidents from happening in future.

First reported by the magazine www.scmagazine.com.au, the article drew comments from a netizen who signed off as Team Intra.

He shed light on the purpose of the hack.

The user said that Team Intra "did not have any problem with the university", and it was "simply a demonstration of how weak their security was".

He added that the group did not intend to leak private data but wanted to show the poor security standards of the website.

"We have our best intentions."

He added that it took just five minutes to get the server's security but they did not change anything on the server.

The user alleged that the passwords had been accessed before as the group had found a list of passwords posted on a password cracking forum.

[email protected]

NUS Lao Lan arrogance so got taught a lesson by Hackers

http://www.asiaone.com/News/Latest+News/Singapore/Story/A1Story20120106-320315.html

ASIAONE
NEWS
SINGAPORE

Hacker group spurred on by NUS error message
Tweet
AsiaOne
Friday, Jan 06, 2012

The hacker group claiming responsibility for yesterday's hack into a National University of Singapore (NUS) server said that an error message had spurred them on.

Australian IT publication, SC magazine, yesterday reported that the message popped up when the group, Team Intra, had initially probed the website.

It has allegedly stated, "If you're trying to use the SQL error message to dig for juicy information, get lost."

This message spurred the hackers to continue with the attempt.

They exploited a vulnerability in the server's database and gained access to about 70 staff members' user names, passwords and domain information.

Team Intra then posted the information online, where it was accessible to public.

A spokesman from NUS told the media that the leaked information was not of confidential nature. He added that none of it had been removed or tampered with.

He also clarified that the online group hacked into a server, which hosted research papers and publications, and not the NUS network.

The Straits Times reported that NUS has reset the passwords of all affected accounts, disconnected the server from the network.

The spokesperson also said that appropriate measures would be put in place to prevent similar incidents from happening in future.

First reported by the magazine www.scmagazine.com.au, the article drew comments from a netizen who signed off as Team Intra.

He shed light on the purpose of the hack.

The user said that Team Intra "did not have any problem with the university", and it was "simply a demonstration of how weak their security was".

He added that the group did not intend to leak private data but wanted to show the poor security standards of the website.

"We have our best intentions."

He added that it took just five minutes to get the server's security but they did not change anything on the server.

The user alleged that the passwords had been accessed before as the group had found a list of passwords posted on a password cracking forum.

[email protected]

http://sammyboy.com/showthread.php?...-DBS-bank-cards!&p=928257&posted=1#post928257

Re: NUS Lao Lan arrogance so got taught a lesson by Hackers

A spokesman from NUS told the media that the leaked information was not of confidential nature. He added that none of it had been removed or tampered with.

Click to expand...

This is the problem with the damned country... nobody EVER admits to anything. Flooding becomes "ponding". Breakdowns become "incidences", Massive financial losses become "long term strategies".

It's not just the PAP govt. It's the whole Sinkie psyche.

Re: NUS Lao Lan arrogance so got taught a lesson by Hackers

Leongsam said:

This is the problem with the damned country... nobody EVER admits to anything. Flooding becomes "ponding". Breakdowns become "incidences", Massive financial losses become "long term strategies".

It's not just the PAP govt. It's the whole Sinkie psyche.

Click to expand...

Sam better don't put Kuai Lan error msg on your server !

Re: NUS Lao Lan arrogance so got taught a lesson by Hackers

matamafia said:

Sam better don't put Kuai Lan error msg on your server !

Click to expand...

I've always used the default message. :p

Re: NUS Lao Lan arrogance so got taught a lesson by Hackers

Leongsam said:

This is the problem with the damned country... nobody EVER admits to anything. Flooding becomes "ponding". Breakdowns become "incidences", Massive financial losses become "long term strategies".

It's not just the PAP govt. It's the whole Sinkie psyche.

Click to expand...

Your statement is flawed. All I need is to find a "body" who admits something and your statement is flushed down the toilet. This flawed "psyche" or logic is worse that the occasional grammatical or spelling error. As a host, we expected better standard!

Re: NUS Lao Lan arrogance so got taught a lesson by Hackers

Leongsam said:

I've always used the default message. :p

Click to expand...

Sam's error msg:

I am not the Kuai Lan PAP you are looking for - pse go HACK@ gov.sg good day!

cunt_opener said:

http://www.asiaone.com/News/Latest+News/Singapore/Story/A1Story20120106-320315.html

ASIAONE
NEWS
SINGAPORE

Hacker group spurred on by NUS error message
Tweet
AsiaOne


It has allegedly stated, "If you're trying to use the SQL error message to dig for juicy information, get lost."

This message spurred the hackers to continue with the attempt.

They exploited a vulnerability in the server's database and gained access to about 70 staff members' user names, passwords and domain information.

Team Intra then posted the information online, where it was accessible to public.

A spokesman from NUS told the media that the leaked information was not of confidential nature. He added that none of it had been removed or tampered with.


[email protected]

Click to expand...

See? Once again. Sinkieness cause all the problem. Why the hell must use Sinkie rudeness on a message and coming from an educational institute. Sinkie uni teach people to be a Sinkie? Sinkie deserve all the shits and problems.

Re: NUS Lao Lan arrogance so got taught a lesson by Hackers

Leongsam said:

This is the problem with the damned country... nobody EVER admits to anything. Flooding becomes "ponding". Breakdowns become "incidences", Massive financial losses become "long term strategies".

It's not just the PAP govt. It's the whole Sinkie psyche.

Click to expand...

I am right again. Stay away from Sinkie and you will be fine.