Swedish password hacking scandal widens

Sweden suffered its worst internet security breach in history, with over 210,000 login details across least 60 websites made public, including personal identity numbers of journalists, MPs and celebrities. On Tuesday, at least 90,000 passwords of the popular Swedish blog Bloggtoppen were exposed through a Twitter account of …

[Locky]

The last line is wrong

It should read;

The Swedish security service Säpo told The Register. "We heard what you did earlier this week, and Stockholm Police will deal with the matter"

[Northern Fop]

Hurdy burdy *chop*

Was the chef one of them? Enquiring minds want to know.

[e-mail]

[disgruntled yank]

ratios

"With a population of just over 9 million, this amounts to just over 2 per cent of all Swedes."

Well, assuming a ratio close to 1 login/person. How valid is that assumption?

[Olafthemighty]

Wow.

Makes you guys look like rank amateurs in the field of personal information dispersal!

[mark l 2]

Yet another website that didn't encrypt the passwords in its database. A few extra lines of code in the software would mean even if hackers did get into the sites database the passwords wouldn't have been exposed.

[Anonymous Coward]

Encrypt them? Do you mean one-way hash them?

[Anonymous Coward]

It's Lisbeth Salander!

[Tomato42]

"discovered a weakness in the code that lies behind the service"

Yes, it allows passwords like "1234", or does it?

[Tomato42]

"Developers should know basic safety requirements. They must know what they are doing and keep track of information they manage."

But, but, that would actually require to fix a problem that's only "possible". After all, our site is super secure, we use SOAP, SaaS and ETLA!

[mhenriday]

We have a certain prediliction

for passwords of the type «123456» (with or without the addition of the user's name)....

Henri