30-01-2011, 20:13
|
#1
|
|
CF Resident Dog
Join Date: Mar 2005
Location: Cambridgeshire
Age: 44
Posts: 6,067
|
Amazon password flaw
You may wish to check and change your Amazon password as it seems they were using an old style crypt which made upper case,lower case and anything longer than 8 characters in your password to be ignored, so if your password was :- 'paSSworD1234' you could actually use 'password' to access your account!
Read on..... http://www.neowin.net/news/amazon-password-flaw
I have just confirmed this by adding 3 digits to my password and it still allowed me to sign in!!! time to change my password!
---------- Post added at 20:13 ---------- Previous post was at 18:40 ----------
Has anyone else checked their password as 2 other people i know had to change theirs as it failed the log in test?
Last edited by SnoopZ; 30-01-2011 at 18:44.
|
|
|
|
30-01-2011, 20:17
|
#2
|
|
Cable Forum Team
Join Date: Jun 2006
Services: Triple XL (BB 30Mb), TiVo, V+
Posts: 22,907
|
Re: Amazon password flaw
I checked mine - if I added anything to the end (it is already eight characters), it let me log in.
__________________
Just to make it clear if a post is bold and is from a team member, it's a moderating decision. If it's not bold or not from a team member, it's not.
|
|
|
|
|
30-01-2011, 20:21
|
#3
|
|
CF Resident Dog
Join Date: Mar 2005
Location: Cambridgeshire
Age: 44
Posts: 6,067
|
Re: Amazon password flaw
Quote:
Originally Posted by Hugh
I checked mine - if I added anything to the end (it is already eight characters), it let me log in.
|
If you had any upper case in the password it would be ignored too.
|
|
|
|
|
30-01-2011, 21:08
|
#4
|
|
Guest
|
Re: Amazon password flaw
I got a 9 charector password upper and lower if I add anything computer says no it also says no if I drop the 9th charector
---------- Post added at 21:08 ---------- Previous post was at 21:08 ----------
also if I change upper to lower case computer says no
|
|
|
|
|
30-01-2011, 21:10
|
#5
|
|
CF Resident Dog
Join Date: Mar 2005
Location: Cambridgeshire
Age: 44
Posts: 6,067
|
Re: Amazon password flaw
How old is the account when you set it up? I think account that are maybe 5 years old maybe ok. 
|
|
|
|
|
30-01-2011, 21:15
|
#6
|
|
Cable Forum Team
Join Date: Jun 2003
Location: between Portsmouth and Southampton.
Age: 59
Services: VM XL TV,VM 10MB,VM Phone and V+HD box.No VM Mobile
Posts: 32,435
|
Re: Amazon password flaw
Mine seems to be OK and that's more than 5 years old.
__________________
.Bold=Mod
|
|
|
|
|
30-01-2011, 21:43
|
#7
|
|
Eva Longoria Fan
Join Date: Jun 2003
Location: Essex
Age: 24
Services: BT,
Sky multiroom (Sky+ & HD),
BT Infinity Option 2
Posts: 8,030
|
Re: Amazon password flaw
I've changed mine, just in case
__________________
MacBook Pro 15"|Mac OS X 10.7 Lion|250GB HDD|2.53GHz Intel Core 2 Duo|8GB DDR3 @1067MHz|Nvidia 9400M 256MB (Intergrated)|2 Year AppleCare Warranty
|
|
|
|
|
30-01-2011, 21:53
|
#8
|
|
cf.mega poster
Join Date: Aug 2004
Location: Northants
Age: 68
Services: Sky+. / VM XL BB and Be Pro. / BT Phoneline.
Posts: 3,713
|
Re: Amazon password flaw
Quote:
Originally Posted by MadGamer
I've changed mine, just in case |
Same as me..
|
|
|
|
|
30-01-2011, 22:20
|
#9
|
|
cf.mega poster
Join Date: Apr 2004
Location: Minas Tirith, Gondor
Age: 46
Posts: 3,458
|
Re: Amazon password flaw
Mine was flawed as well - changed now.
Good spot.
Hope the security guy got a good kicking.
|
|
|
|
|
30-01-2011, 22:52
|
#10
|
|
cf.member
Join Date: Mar 2010
Location: Oh well east end of a nuclear waste dept, glowing inthe dark like a light bulb - Can you find me ?
Services: B/B Virgin 20MB
Virgin Phone line
Sky Freesat
Posts: 90
|
Re: Amazon password flaw
Quote:
Originally Posted by SnoopZ
You may wish to check and change your Amazon password as it seems they were using an old style crypt which made upper case,lower case and anything longer than 8 characters in your password to be ignored, so if your password was :- 'paSSworD1234' you could actually use 'password' to access your account!
Read on..... http://www.neowin.net/news/amazon-password-flaw
I have just confirmed this by adding 3 digits to my password and it still allowed me to sign in!!! time to change my password!
---------- Post added at 20:13 ---------- Previous post was at 18:40 ----------
Has anyone else checked their password as 2 other people i know had to change theirs as it failed the log in test? |
Same here account is over 5 years old, the problem not a problem for me. Here  for all the party animals out there.  ... 
toon
__________________
Another great fan of zings repiles of warmness.. ah  & others alike 
|
|
|
|
|
30-01-2011, 23:33
|
#11
|
|
Guest
|
Re: Amazon password flaw
Quote:
Originally Posted by SnoopZ
How old is the account when you set it up? I think account that are maybe 5 years old maybe ok. |
pass lol
|
|
|
|
|
Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
|
|
|
Posting Rules
|
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
HTML code is Off
|
|
|
All times are GMT +1. The time now is 08:47.
|
Join CF
You are here: 
