Ramblings of an old Doc
Published on October 4, 2013 By DrJBHL In Personal Computing

 

Just saw this, folks. If you have an Adobe account, you might want to watch your credit reports even though Adobe states all that info was hashed and salted.

“Adobe said it does not believe the attackers got their hands on decrypted credit or debit card numbers. However, the company is in the process of notifying customers whose credit or debit card information is believed to be involved in the incident, so that they can take appropriate steps to protect themselves against potential misuse of their information.” – The Telegraph

Adobe’s source code was also stolen (for a number of products). They might be getting ransom demands in the future, or worse, that info might well be used to create security exploits affecting many more computers.

“Adobe products affected by the source code theft include Adobe Acrobat, ColdFusion, and ColdFusion Builder. Security expert Graham Cluley highlighted fears that malicious hackers could examine the source code and attempt to find flaws and vulnerabilities that they might attempt to exploit.” – ibid

Sorry to start your day this way, folks.

Source:

http://www.telegraph.co.uk/technology/internet-security/10355243/Adobe-cyber-attacks-expose-2.9m-customers-details.html


Comments
on Oct 04, 2013

Saw this on FB. Only things I ever did were the trial versions of PS. BTW......hacked versions of Adobe's Photoshop up to and including CC are all over youtube. Not worth the hassel. 

on Oct 05, 2013

that's why they move to cloud subscription. to make it easier to lose data

on Oct 05, 2013

alaknebs

that's why they move to cloud subscription. to make it easier to lose data

My thoughts exactly. Glad I've only used trial versions when I had to.

on Oct 05, 2013

Adobe's decision to move to the cloud was sound (in a business sense) for them.

Hopefully, the data that was stolen was encrypted and salted, as they maintain.

The loss of the source code, though is the more worrisome part of the event.

There isn't a computer around that doesn't have Adobe software on it (Reader, Flash...etc.). This will make many computers vulnerable to security hacks depending on what was stolen, and what's exploitable in it.

That part Adobe hasn't been very transparent about, and that's worrisome. Brace yourselves for zero day exploits.

on Oct 05, 2013

Then everyone uninstalls everything Adobe and everything stops working. j/k lol

on Oct 05, 2013

In my email today:

 

 

on Oct 05, 2013

funny. i read that firefox just slapped on their own version of flash player in their nightly recently..

which means we'll probably be able to get rid of adobe's flash player by next year.