The Company identifies close to 9,000 C2 servers and hundreds of compromised websites, including government portals
By: Dan Goodin, Ars Technica
For years, Microsoft engineers have quietly limited Hotmail passwords to 16 characters, a revelation that has surprised and concerned some users who have long entered passcodes twice that long to access accounts.
One such user is Costin Raiu, the director of the global research and analysis team at antivirus provider Kaspersky Lab. On Friday he reported receiving a new error message when he entered the same 30-character passcode he long used on the Microsoft site. When he typed in the first 16 characters, as the error message directed him to do, he was able to access his account just fine. The change concerned Raiu, because it meant that for years his Hotmail account hadn't been as secure as he was led to believe.
"To pull off this trick with older passwords, Microsoft has two choices," he wrote. Choice one: "Store full plaintext passwords in their [database]; compare the first 16 [characters] only." Choice two: "Calculate the hash only on the first 16; ignore the rest."
Articles related to Business News
Kaspersky Lab research shows massive IoT device peer-to-peer botnet with an unknown end goal
Proven Detection Empowered with Scalability: Kaspersky Lab Releases Major Update to its Anti Targeted Attack Platform
Kaspersky Lab today announced a new version of the Kaspersky Anti Targeted Attack (KATA) platform, the company’s enterprise solution for detecting advanced threats and targeted attacks.