Category
Security
-
08.07.08Techsoup Hit By SQL Injection AttackI was wondering why Techsoup was down all day. The sad news after the jump: Continue Reading...
-
03.27.08Pro-Tibet Non-Profit Under Cyber-AttackUPDATE: Please Digg this story at http://snurl.com/22s1n We haven’t discussed security very much on this blog for two simple reasons: I’m not a computer security expert and despite the Convio security breach, I rarely get wind of security issues that occur in the non-profit sector. However, we’ve had a few non-profits go public recently with a sustained series of cyberattacks that have been perpetrated on pro-Tibet advocacy nonprofits. Unfortunately, the Washington Post writer didn’t have enough specifics for us techies to take action on the problems there. NOTE: Be aware that much of the discussion that follows was written with ...
-
11.27.07NY Times finally breaks the story about the Convio security breachOK, this isn't how I pictured the blog showing up in the New York Times, but the whole Convio affair has just been covered by Stephanie Strom of the New York Times. Thanks to Beth Kanter for directing the reporter to me. It turns out the affair might be worse than we thought: Continue Reading...
-
11.20.07Techsoup affected by Convio security breach, tooGo here. Oh well. I'm screwed or rather my old organization is. I doubt they'll be reading that post but now it's time to tell them. UPDATE (Thanksgiving 2007): And of course I can't tell them because they sent out the notice the night before a holiday only adding to the exposure -- GAHHHH! I found out from Beth Kanter. She got the e-mail. I didn't because I don't have access to my old Techsoup account. Of course, I'm not sure if my old org has it either. I know for a fact their systems aren't compromised though since I never used administrator account ...
-
11.14.07Suggested guidelines for nonprofit disclosure of security breachesI'm very disappointed with the reaction of nonprofits to the Convio security breach. The main reason I'm disappointed with it is that out of 92 affected organizations, we know of only FOUR that have been affected. These are: Working Assets freepress.net CARE American Museum of Natural History I know of an additional nonprofit that doesn't want to disclose this as well. Continue Reading...
-
11.07.07Dave Crooke explains how passwords are stored and used on GetActive systemsI'm not quite sure why Dave Crooke is using an e-mail list like the Progressive Exchange to talk about the technical aspects of the Convio security breach. However, it beats not getting anything at all. Dave is discussing the way passwords were stored on the GetActive system: Continue Reading...
-
11.06.07Dave Crooke speaks about the Convio security breachOver on the progressive exchange list, Dave Crooke gave out more technical details about the Convio security breach: Continue Reading...
-
11.04.07More about the security problems at ConvioThe progressive blogosphere is also reporting issues with Convio mainly through ActForChange which is run by Working Assets: Continue Reading...
-
11.04.07Breaking news: Convio reports security breach on GetActive systemsIf you're a former GetActive client [UPDATE 11/5/2007]: (and you were unlucky enough to have your Convio system hacked), you might have just received an e-mail that reads like this: Convio has identified a security attack against our GetActive software systems that has resulted in your constituent data being accessed by an unauthorized third-party. We take this attack very seriously and are committed to working with you to minimize the impact on your organization and your constituents. The third-party sought to download email addresses and, in some instances, member passwords. There was no loss of credit card data. We are confident ...
-
12.24.06Fundraising Widgets = Possible Phishing AttackYou know, I was wondering about the speed of implementation for all these badges and widgets appearing on the Web. I thought to myself, was it really that easy to create a me-too fundraising widget? What was the barrier of entry? I decided to discuss the technical specifications of the technology. Now, I'm an old Internet hand. I still remember finger and gopher. I've held not one but two jobs with the title of "webmaster" (blast from the past, huh?). However, I wouldn't call myself a security guru. Unfortunately, I found out within minutes that it's remarkably easy to reverse-engineer a ...
Search Only Non-profit Links
Click here to add nonprofit search to your browser! Want to add your links to the search engine? Be a MANSEO contributor!Feedburner says we have…
Most Commented Posts
This work is licensed under a Creative Commons Attribution-NonCommercial-NoDerivs 3.0 United States.
